{"history":[{"alert":0,"cve":"CVE-2022-23748","id":22394,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.08329, \"percentile\": 0.95026}"},{"alert":0,"cve":"CVE-2022-23748","id":20013,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.08329, \"percentile\": 0.94993}"},{"alert":0,"cve":"CVE-2022-23748","id":17979,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.08329, \"percentile\": 0.94987}"},{"alert":0,"cve":"CVE-2022-23748","id":16043,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.08329, \"percentile\": 0.94984}"},{"alert":0,"cve":"CVE-2022-23748","id":14021,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.08329, \"percentile\": 0.94982}"},{"alert":0,"cve":"CVE-2022-23748","id":11803,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.08329, \"percentile\": 0.94974}"},{"alert":0,"cve":"CVE-2022-23748","id":9789,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.08329, \"percentile\": 0.94969}"},{"alert":1,"cve":"CVE-2022-23748","id":8313,"kind":"cna","observed_at":1793852400,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-03T03:51:46.009Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_transferred\"], \"url\": \"https://cpr-zero.checkpoint.com/vulns/cprid-2193/%2C\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://www.audinate.com/learning/faqs/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"LOCAL\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"REQUIRED\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2022-23748\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-02-06T17:19:39.559883Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2025-02-06\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-23748\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:15:31.225Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-23748\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-02-06T00:00:00.000Z\", \"value\": \"CVE-2022-23748 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"Audinate Dante Application Library for Windows\", \"vendor\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions prior to and including 1.2.0\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.\"}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-114\", \"description\": \"CWE-114: Process Control\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2022-12-14T00:00:00.000Z\", \"orgId\": \"897c38be-0345-43cd-b6cf-fe179e0c4f45\", \"shortName\": \"checkpoint\"}, \"references\": [{\"url\": \"https://cpr-zero.checkpoint.com/vulns/cprid-2193/%2C\"}, {\"url\": \"https://www.audinate.com/learning/faqs/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748\"}]}}, \"cveMetadata\": {\"assignerOrgId\": \"897c38be-0345-43cd-b6cf-fe179e0c4f45\", \"assignerShortName\": \"checkpoint\", \"cveId\": \"CVE-2022-23748\", \"datePublished\": \"2022-11-17T00:00:00.000Z\", \"dateReserved\": \"2022-01-19T00:00:00.000Z\", \"dateUpdated\": \"2025-10-21T23:15:31.225Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2022-23748","id":7337,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.08329, \"percentile\": 0.94965}"},{"alert":0,"cve":"CVE-2022-23748","id":5114,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.08329, \"percentile\": 0.94957}"},{"alert":0,"cve":"CVE-2022-23748","id":2896,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.08329, \"percentile\": 0.9495}"},{"alert":1,"cve":"CVE-2022-23748","id":507,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2022-23748\", \"cwes\": [\"CWE-114\"], \"dateAdded\": \"2025-02-06\", \"dueDate\": \"2025-02-27\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://www.getdante.com/support/faq/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748/ ; https://nvd.nist.gov/vuln/detail/CVE-2022-23748\", \"product\": \"Dante Discovery\", \"requiredAction\": \"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code.\", \"vendorProject\": \"Audinate\", \"vulnerabilityName\": \"Dante Discovery Process Control Vulnerability\"}"}],"record":{"affected":[{"product":"Audinate Dante Application Library for Windows","vendor":"n/a","versions":[{"status":"affected","version":"All versions prior to and including 1.2.0"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-03T03:51:46.009Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_transferred"],"url":"https://cpr-zero.checkpoint.com/vulns/cprid-2193/%2C"},{"tags":["x_transferred"],"url":"https://www.audinate.com/learning/faqs/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2022-23748","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-06T17:19:39.559883Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2025-02-06","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-23748"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2025-10-21T23:15:31.225Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-23748"}],"timeline":[{"lang":"en","time":"2025-02-06T00:00:00.000Z","value":"CVE-2022-23748 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Audinate Dante Application Library for Windows","vendor":"n/a","versions":[{"status":"affected","version":"All versions prior to and including 1.2.0"}]}],"descriptions":[{"lang":"en","value":"mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files."}],"problemTypes":[{"descriptions":[{"cweId":"CWE-114","description":"CWE-114: Process Control","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2022-12-14T00:00:00.000Z","orgId":"897c38be-0345-43cd-b6cf-fe179e0c4f45","shortName":"checkpoint"},"references":[{"url":"https://cpr-zero.checkpoint.com/vulns/cprid-2193/%2C"},{"url":"https://www.audinate.com/learning/faqs/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748"}]}},"cveMetadata":{"assignerOrgId":"897c38be-0345-43cd-b6cf-fe179e0c4f45","assignerShortName":"checkpoint","cveId":"CVE-2022-23748","datePublished":"2022-11-17T00:00:00.000Z","dateReserved":"2022-01-19T00:00:00.000Z","dateUpdated":"2025-10-21T23:15:31.225Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794327601,"cve":"CVE-2022-23748","description":"mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.","epss":{"date":"2026-11-12","epss":0.08329,"percentile":0.95026},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2022-23748","cwes":["CWE-114"],"dateAdded":"2025-02-06","dueDate":"2025-02-27","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://www.getdante.com/support/faq/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748/ ; https://nvd.nist.gov/vuln/detail/CVE-2022-23748","product":"Dante Discovery","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","shortDescription":"Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code.","vendorProject":"Audinate","vulnerabilityName":"Dante Discovery Process Control Vulnerability"},"kev_checked":1794522003,"products":"n/a Audinate Dante Application Library for Windows","references":["https://cpr-zero.checkpoint.com/vulns/cprid-2193/%2C","https://www.audinate.com/learning/faqs/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-23748"],"score":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Dante Discovery Process Control Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}