CVE-2023-52163
HIGH KEV NUCLEIDigiever DS-2105 Pro 3.1.0.71-11 - Command Injection via time_tzsetup.cgi
Title source: llmExploitation Summary
CVE-2023-52163 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added December 22, 2025. A Nuclei detection template is also available.
Description
Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Nuclei Templates (1)
Digiever DS-2105 Pro - Command Injection
HIGHby rajesh-social-tech
References (4)
Core 4
Core References
Exploit, Third Party Advisory
https://www.akamai.com/blog/security-research/digiever-fix-that-iot-thing
Exploit, Third Party Advisory
https://www.txone.com/blog/digiever-fixes-sorely-needed/
US Government Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-52163
Exploit, Third Party Advisory
https://www.fortinet.com/blog/threat-research/shadowv2-casts-a-shadow-over-iot-devices
Scores
CVSS v3
8.8
EPSS
0.7388
EPSS Percentile
98.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
active
Automatable
no
Technical Impact
total
Details
CISA KEV
2025-12-22
VulnCheck KEV
2024-12-19
ENISA EUVD
EUVD-2023-56836
CWE
CWE-862
Status
published
Products (2)
digiever/ds-2105_pro\+_firmware
3.1.0.71-11
digiever/ds-2105_pro_firmware
3.1.0.71-11
Published
Feb 03, 2025
KEV Added
Dec 22, 2025
Tracked Since
Feb 18, 2026