CVE Vulnerability

CVE-2022-23748

mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.

7.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.audinate.com/learning/faqs/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748 Vendor Advisory
https://cpr-zero.checkpoint.com/vulns/cprid-2193/, Broken Link
Configurations

Configuration 1
Information

Published : 2022-11-17 11:15

Updated : 2022-12-23 05:03

NVD link : CVE-2022-23748

Mitre link : CVE-2022-23748

Products Affected
No products.
CWE
CWE-426

Untrusted Search Path