Home

Description

Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.

PUBLISHED Reserved 2022-09-19 | Published 2022-11-29 | Updated 2025-10-21 | Assigner mitre

CISA Known Exploited Vulnerability

Date added 2025-08-05 | Due date 2025-08-26

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

References

gitlab.com/lu-ka/cve-2022-40799

www.dlink.com/...ducts/dnr-322l-cloud-network-video-recorder product

www.cisa.gov/...erabilities-catalog?field_cve=CVE-2022-40799 government-resource

gitlab.com/lu-ka/cve-2022-40799

cve.org (CVE-2022-40799)

nvd.nist.gov (CVE-2022-40799)

Download JSON