CVE-2022-40799: D-Link DNR-322L Download of Code Without Integrity Check Vulnerability

High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2025-08-05. EPSS: 33.7% chance of exploitation in the next 30 days.

Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.

Affected products

• D-Link DNR-322L Firmware: up to and including 2.60b15

Published 2022-11-29. Last modified 2026-06-17.