# CVE-2023-52163

Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

- Page: https://www.vulneraibility.com/cve/CVE-2023-52163
- CVSS: 8.8
- Known exploited: yes, in CISA KEV since 2025-12-22; CISA due date 2026-01-12
- EPSS: 96.92%
- Detection templates only, no public exploit found: 1 Nuclei template
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2025-12-24)
- Weakness: CWE-862
- Published: 2025-02-03

## Affected

- digiever:ds-2105_pro_firmware
- digiever:ds-2105_pro\+_firmware

## References

- [other] https://www.txone.com/blog/digiever-fixes-sorely-needed/
- [other] https://www.akamai.com/blog/security-research/digiever-fix-that-iot-thing
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-52163
- [advisory] https://www.fortinet.com/blog/threat-research/shadowv2-casts-a-shadow-over-iot-devices

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.