high8.8Known exploited
CVE-2023-52163
Digiever DS-2105 Pro Missing Authorization Vulnerability
Exploited in the wild
This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2025-12-22. Federal due date: 2026-01-12.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
Digiever DS-2105 Pro contains a missing authorization vulnerability which could allow for command injection via time_tzsetup.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Digiever | Ds-2105 Pro Firmware | Version 3.1.0.71-11 |
| Digiever | Ds-2105 Pro\+ Firmware | Version 3.1.0.71-11 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- https://www.akamai.com/blog/security-research/digiever-fix-that-iot-thing
- https://www.txone.com/blog/digiever-fixes-sorely-needed/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-52163
- https://www.fortinet.com/blog/threat-research/shadowv2-casts-a-shadow-over-iot-devices