CVE-2023-52163

HIGH KEV NUCLEI

Digiever Ds-2105 Pro Firmware - Missing Authorization

Title source: rule

Description

Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Nuclei Templates (1)

Digiever DS-2105 Pro - Command Injection

HIGHby rajesh-social-tech

References (4)

[Exploit, Third Party Advisory] https://www.akamai.com/blog/security-research/digiever-fix-that-iot-thing

[Exploit, Third Party Advisory] https://www.txone.com/blog/digiever-fixes-sorely-needed/

[US Government Resource] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-52163

[Exploit, Third Party Advisory] https://www.fortinet.com/blog/threat-research/shadowv2-casts-a-shadow-over-iot-devices

Scores

CVSS v3 8.8

EPSS 0.7554

EPSS Percentile 98.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CISA KEV 2025-12-22

VulnCheck KEV 2024-12-19

ENISA EUVD EUVD-2023-56836

CWE

CWE-862

Status published

Products (2)

digiever/ds-2105_pro\+_firmware 3.1.0.71-11

digiever/ds-2105_pro_firmware 3.1.0.71-11

Published Feb 03, 2025

KEV Added Dec 22, 2025

Tracked Since Feb 18, 2026