ZeroDay Findings
Sign inSign up

Findings

CVE-2022-40799

D-Link DNR-322L Download of Code Without Integrity Check Vulnerability

Published Nov 28, 2022 · updated Jun 16, 2026 · dlink dnr-322l firmware

D-Link DNR-322L contains a download of code without integrity check vulnerability that could allow an authenticated attacker to execute OS level commands on the device. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Nov 28, 2022 · Catalog

    Detected

    D-Link DNR-322L contains a download of code without integrity check vulnerability that could allow an authenticated attacker to execute OS level commands on the device. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

  2. Aug 5, 2025 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  3. Aug 26, 2025 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    D-Link DNR-322L contains a download of code without integrity check vulnerability that could allow an authenticated attacker to execute OS level commands on the device. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA due date Aug 26, 2025

Affected

  • cpe dlink/dnr-322l firmwareversion unspecified
  • vendor D-Link DNR-322Lversion unspecified

Sources

  • CISA KEVConfirmed exploitationCVE-2022-40799

    D-Link DNR-322L contains a download of code without integrity check vulnerability that could allow an authenticated attacker to execute OS level commands on the device. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

    cisa.gov
  • CVE.orgVulnerability recordCVE-2022-40799

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2022-40799

    30-day exploitation probability 33.7%

    first.org
  • NIST NVDVulnerability recordCVE-2022-40799

    Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.

    nvd.nist.gov

References