ACTIVELY EXPLOITED
CVE-2022-23748: Dante Discovery Process Control Vulnerability
| Vendor | Audinate |
|---|---|
| Product | Dante Discovery |
| Actively exploited | Yes |
| Added to CISA KEV | 6 Feb 2025 |
| CISA federal deadline | 27 Feb 2025 |
| Weakness (CWE) | CWE-114 |
Required action (CISA's text)
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description (NVD)
Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code.
SOURCES
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.