CyberSec.Space Logo
Back to CVE Browser

CVE-2023-52163

🔥 Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-02-03
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected Platforms (CPE)

💻
Digiever

Ds 2105 Pro Firmware

= 3.1.0.71-11
💻
Digiever

Ds 2105 Pro\+ Firmware

= 3.1.0.71-11

References & Advisories

🔗 https://www.akamai.com/blog/security-research/digiever-fix-that-iot-thing
🔗 https://www.txone.com/blog/digiever-fixes-sorely-needed/
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-52163
🔗 https://www.fortinet.com/blog/threat-research/shadowv2-casts-a-shadow-over-iot-devices

Related Vulnerabilities

CVE-2026-658937.0

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with ...

CVE-2026-9830

The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, lea...

CVE-2026-159628.8

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, ...

CVE-2026-645208.4

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The ...