---
title: "Security digest: September 27, 2022"
url: https://erroneo.us/security/2022-09-27/
description: "September 27, 2022 vulnerability digest: 1 brief (D-Link DNR-322L CVE-2022-40799: EOL NVR RCE in KEV). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2022-09-27
date_modified: 2026-10-23
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: September 27, 2022

1 editorial brief.

## Take stock

- Check exposure: D-Link DNR-322L CVE-2022-40799: EOL NVR RCE in KEV . Anyone with a D-Link DNR-322L network video recorder still in service, especially one whose web interface is reachable from the internet or uses a default or shared password.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [D-Link DNR-322L CVE-2022-40799: EOL NVR RCE in KEV](https://erroneo.us/security/briefs/d-link-dnr-322l-cve-2022-40799-backup-restore-rce/index.md): There is no patch and never will be; the job is to find any DNR-322L recorder still plugged in and replace it, not to fix it.

## Known exploited (CISA KEV)

None.

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2022-09-27/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt