CVE-2022-23748: Audinate Dante Discovery DLL Sideloading Vulnerability Enables Local Code Execution
What It Is — The Dante Discovery component of Audinate’s audio‑networking suite contains a process‑control flaw in mDNSResponder.exe that permits DLL sideloading. A local attacker can cause the application library to load a malicious DLL and execute arbitrary code.
Exploitability — The vulnerability is exploitable locally; no public exploit code has been released, but the attack path is straightforward and does not require elevated privileges beyond local user access. CVSS v3.1 base score 7.8 (High).
Affected Products — Audinate Dante Discovery (any version prior to the vendor‑issued patch released March 2023).
Why It Matters for Trust & Control Assurance —
- Demonstrates the need for continuous verification that only approved binaries run on critical media‑production workstations.
- Highlights gaps in configuration‑management controls that map to multiple frameworks (e.g., NIST CSF “Protect” and ISO 27001 “Asset Management”).
- Provides a concrete evidence point for auditors: patched software inventory and DLL‑load monitoring logs.
Recommended Actions —
- Apply Audinate’s security patch or upgrade to the latest Dante Discovery release.
- Enable application allow‑listing or endpoint protection that blocks unauthorized DLL loads for
mDNSResponder.exe. - Capture baseline hashes of approved binaries and integrate change‑detection alerts into your continuous‑monitoring platform.
Source: CISA KEV – CVE‑2022‑23748