peter bassill · operator
$ cve CVE-2022-40799 JSON

CVE-2022-40799 KEV

8.8
HIGH · CVSS 3.1 · EPSS 33.7% (pctl 98)

Patch first

On CISA KEV — known exploited in the wild, due 2025-08-26.

Description

Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.

Scoring

CVSS8.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS33.65% — more likely to be exploited than 98% of all CVEs
WeaknessCWE-494
On CISA KEVyes — remediate by 2025-08-26
Public exploitnone known
Published2022-11-29
Last modified2026-06-17

CISA KEV

NameD-Link DNR-322L Download of Code Without Integrity Check Vulnerability
Added2025-08-05
Due2025-08-26
Vendor / productD-Link / DNR-322L
Ransomware usenone reported

Affected (2)

VendorProduct
dlinkdnr-322l
dlinkdnr-322l firmware

References

→ the Explorer  ·  watch your stack  ·  NVD