mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.
Conclusion & alert: CVE-2022-23748 is rated Critical Active Threat (87.5/100): CVSS High severity, with high exploitation likelihood (EPSS 10.34%, 93th percentile).Core evidence: CISA KEV confirms active exploitation (added 2025-02-06) affecting Audinate / Dante Discovery. a weakness (CWE-114) Unauthenticated remote administrative access may be possible.Mandatory action: The CISA remediation deadline has passed—treat as an emergency patch priority.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
CISA KEV Record for CVE-2022-23748
Name: Dante Discovery Process Control Vulnerability · CISA KEV detail
Exploit added: 2025-02-06
Action due: 2025-02-27
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Exploit prediction scoring system (EPSS) score for CVE-2022-23748
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).