CVE-2023-52163

Name of the Vulnerable Software and Affected Versions Digiever DS-2105 Pro version 3.1.0.71-11

Description The network video recorder firmware for Digiever DS-2105 Pro has a flaw due to missing authorization. Exploitation may allow an attacker to execute arbitrary commands. The issue involves command injection through the

time tzsetup.cgi

API endpoint. This affects products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.