PT-2025-1556 · Digiever · Digiever Ds-2105 Pro

Ta-Lun Yen · Published 2025-02-03 · Updated 2025-02-03 · CVE-2023-52164

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Digiever DS-2105 Pro version 3.1.0.71-11

Description The issue allows for arbitrary file read through the access device.cgi file on affected devices. This problem only affects products that are no longer supported by the manufacturer.

Recommendations For Digiever DS-2105 Pro version 3.1.0.71-11, as a temporary workaround, consider restricting access to the access device.cgi file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2023-52164

Affected Products

Digiever Ds-2105 Pro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-52164 · Security Note
• https://twitter.com/CVEnew/status/1886529634277474569 · Twitter Post
• https://akamai.com/blog/security-research/digiever-fix-that-iot-thing · Note
• https://txone.com/blog/digiever-fixes-sorely-needed · Note