Lucene search
HistoryNov 17, 2022 - 11:15 p.m.
CVE-2022-23748
mdnsresponder
dll sideloading
vulnerability
executable
malicious attacker
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
29.7%
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.
Affected configurations
Node
audinatedante_application_libraryRange≤1.2.0
microsoftwindowsMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| audinate | dante_application_library | * | cpe:2.3:a:audinate:dante_application_library:*:*:*:*:*:*:*:* |
| microsoft | windows | - | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2022-23748
2022-11-17 23:15:14
prion
prion
Design/Logic Flaw
2022-11-17 23:15:00
cvelist
cvelist
CVE-2022-23748
2022-11-17 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
29.7%
Related for NVD:CVE-2022-23748