EXPOSURES › CVE-2022-40799

CVE-2022-40799

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2025-08-05 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-40799 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatched

D-Link DNR-322L exposed to authenticated RCE due to lack of integrity checks on code downloads.

D-Link's DNR-322L, an end-of-life product, suffered from a vulnerability allowing OS-level command execution by authenticated attackers. Users were advised to cease using the product.

Shame score — Critical RCE in EoL/EoS product with known unpatched vulnerabilities.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

D-Link · vendor DNR-322L · product

DESCRIPTION

D-Link DNR-322L contains a download of code without integrity check vulnerability that could allow an authenticated attacker to execute OS level commands on the device. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.