CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-11-29
D-Link DNR-322L NVR Remote Code Execution via Backup Config Data Integrity Failure (CVE-2022-40799)
[Affected Scope] D-Link DNR-322L Cloud Network Video Recorder firmware versions 2.60B15 and prior
[Impact] An authenticated attacker can exploit the lack of data integrity verification in the backup configuration feature to execute arbitrary OS-level commands and fully compromise the device
[Mitigation] Since this product is End-of-Life (EOL), immediately isolate the device from the external network and migrate to a supported alternative