Digiever DS-2105 Pro Missing Authorization Vulnerability

ALTO 8.8EXPLOITED (CISA KEV)CVE-2023-52163 · Published 03/02/2025 · updated 17/06/2026

Digiever DS-2105 Pro Missing Authorization Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 22/12/2025. Patch affected systems as an emergency.

In breve

CVE-2023-52163 è una vulnerabilità ALTO (CVSS 8.8).
Sfruttata attivamente: la CISA l'ha aggiunta al catalogo KEV il 22/12/2025.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 96.9%, superiore al 99.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
DS-2105 Pro Digiever	Versions not published yet (product named by CISA KEV)

Description

Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

References

akamai.com/blog/security-research/digiever-fix-that-iot-thing · Exploit
txone.com/blog/digiever-fixes-sorely-needed · Exploit
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
fortinet.com/blog/threat-research/shadowv2-casts-a-shadow-over-iot-devices · Exploit
CISA KEV · CVE-2023-52163

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free