high8.8Known exploited
CVE-2022-40799
D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2025-08-05. Federal due date: 2025-08-26.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Dnr-322l Firmware | through 2.60b15 |