High severity · published Nov 29, 2022
CVE-2022-40799
D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
In wildKEV
8.8
CVSS
33.7%
EPSS
Yes
On KEV
Description
Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)33.7% · higher than 98% of CVEs
Exploited in the wildYes
CISA KEVListed Aug 5, 2025
Federal remediation dueAug 26, 2025
Ransomware campaign useNot known
Affected products
Which versions
DF
Dnr-322l Firmware · Dlink
through 2.60b15 · source: NVD
DN
DNR-322L · D-Link
All versions, or not specified · source: KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-40799
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-40799
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
gitlab.com
https://gitlab.com/lu-ka/cve-2022-40799
More from Dnr-322l Firmware
9.8
CVE-2024-3273
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
9.8
CVE-2024-3272
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials
9.8
CVE-2024-8214
A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L,…
9.8
CVE-2024-8213
A vulnerability classified as critical has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L,…
9.8
CVE-2024-8212
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343,…