CVE-2023-52163: Digiever DS-2105 Pro Missing Authorization Vulnerability

High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2025-12-22. EPSS: 96.9% chance of exploitation in the next 30 days.

Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

• Digiever DS-2105 Pro+ Firmware: version 3.1.0.71-11 only
• Digiever DS-2105 Pro Firmware: version 3.1.0.71-11 only

Published 2025-02-03. Last modified 2026-06-17.