Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection.
Affects DigiEver DVR devices whose exact models and versions are unconfirmed. No vendor fix has been released yet.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Listed in CISA KEV
- How many real-world setups can hit the bug, from the vendor's advisory and CISA data. It does not know your setup.What do these mean? →
- Actively exploited
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The Digiever DS-2105 Pro network video recorder firmware is affected by a command injection flaw in its time zone setup web interface (time_tzsetup.cgi). An attacker could potentially exploit this to run arbitrary system commands on the device, and this issue applies only to devices no longer supported by the vendor.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Timeline
- CVE published
- Added to CISA KEV
CISA has evidence of exploitation in the wild
- CISA remediation deadline
Due date for US federal agencies to patch
- Record last updated
- EPSS reached 10%
FIRST estimates at least a 10% chance of exploitation in the next 30 days
Affected versions
- n/a n/a
Version range not reported
References 2
Questions about CVE-2023-52163
What does this mean?
The time_tzsetup.cgi script on DigiEver DVRs has a command injection flaw. After logging in, a user can run injected commands on the device, which allows remote code execution.Source: txone.com
Am I affected, and how do I check?
The researcher could not determine the exact model or affected version. The script is reached through the /cgi-bin/cgi_main.cgi gateway, which proxies all functions, so that endpoint is the setup to check.Source: txone.com
What should I do about it?
The vendor has not released a fix or advisory, so no upgrade target is available. Limit exposure of the device until one is published.Source: txone.com
Is it being exploited?
Yes. CISA added it to its Known Exploited Vulnerabilities catalog on 2025-12-22, which means it has evidence of attacks. No public exploit code is tracked.Source: cisa.gov, cve.now feed data
What if there's no patch?
Avoid exposing the device to the Internet. Place a firewall or gateway in front of the device's management interface to proxy access to it.Source: txone.com