CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2022-237487.8/HIGHEPSS 8.3%CISA KEV
2022-11-17

Audinate Dante Discovery mDNSResponder.exe DLL Sideloading and Privilege Escalation Vulnerability (CVE-2022-23748) Analysis & Mitigation Guide

[Affected Scope] Windows systems running Audinate Dante Discovery services and utilizing the mDNSResponder.exe component

[Impact] Local attackers can leverage the legitimate, signed executable to load malicious DLLs, leading to arbitrary code execution with elevated privileges

[Mitigation] Apply official security patches from Audinate, restrict write permissions on the mDNSResponder execution directory, and monitor for unauthorized DLL loads

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse