Dante Discovery Process Control Vulnerability

[ Why it matters ]Priority signals

• Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2025-02-06

[ Description ]Official description

mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable to load malicious files.

CISA: Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local attacker can leverage this vulnerability in the Dante Application Library to execute arbitrary code.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 27 Feb 2025): Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• cpr-zero.checkpoint.com/vulns/cprid-2193/%2CBroken Link
• www.audinate.com/learning/faqs/audinate-response-to-dante-discovery-mdnsresponder-exe-s…Vendor Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource