CVE-2023-52163
Missing Authorization in Digiever DS-2105 Pro. CISA confirmed attackers exploit it and added it to its Known Exploited Vulnerabilities catalog on 22 December 2025.
- Product
- Digiever DS-2105 Pro
- Added to CISA's catalog
- Federal fix-by date
- Ransomware
- No known use in ransomware campaigns
- Vendor advisories
- Sources
- CISA’s catalog, NVD entry
CISA’s description.
Digiever DS-2105 Pro contains a missing authorization vulnerability which could allow for command injection via time_tzsetup.cgi.
Every flaw CISA confirmed exploited in the last 30 days is on the exploit watch. This is not security advice. Check the vendor’s advisory before acting. From CISA’s catalog of 3 November 2026.