Dante Discovery < 1.2.1

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(241293);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/07/03");

  script_cve_id("CVE-2022-23748");
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2025/02/27");

  script_name(english:"Dante Discovery < 1.2.1");

  script_set_attribute(attribute:"synopsis", value:
"The version of Dante Discovery installed on the remote Windows host is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"The version of Dante Discovery installed on the remote Windows host is prior to 1.2.1. It is, therefore, affected by
a vulnerability. mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load 
the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid 
and legitimate executable to load malicious files.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  # https://www.getdante.com/support/faq/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748/
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?62b5c3fc");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Dante Discovery version 1.2.1 or later.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2022-23748");

  script_set_attribute(attribute:"vuln_publication_date", value:"2022/12/07");
  script_set_attribute(attribute:"patch_publication_date", value:"2022/12/07");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/07/03");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"x-cpe:/a:dante:discovery");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("dante_discovery_win_installed.nbin");
  script_require_keys("SMB/Registry/Enumerated", "installed_sw/Dante Discovery");

  exit(0);
}

include('vcf.inc');

var app_info = vcf::get_app_info(app:'Dante Discovery', win_local:true);

# patch available for 1.2.0 and earlier, so require paranoia - for < fixed version
var constraints = [
  { 'fixed_version' : '1.2.1', 'fixed_display': 'See vendor advisory', 'require_paranoia' : true }
];

vcf::check_version_and_report(
    app_info:app_info,
    constraints:constraints,
    severity:SECURITY_WARNING
);