Is CVE-2023-52163 actively exploited?

Yes. CVE-2023-52163 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which means exploitation in the wild has been confirmed.

Can CVE-2023-52163 be exploited remotely?

Yes. CVE-2023-52163 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2023-52163?

CVE-2023-52163 has a CVSS score of 8.8 (HIGH) and an EPSS exploitation probability of 67.48%.

HOME VULNERABILITIESCVE-2023-52163

HIGHCISA KEVIN THE WILD

CVE-2023-52163

Published: December 22, 2025

8.8

CVSS v3.1

EPSS:67.48%probability of exploitation in 30 daysPercentile:98.5th

Official Description

Digiever DS-2105 Pro contains a missing authorization vulnerability which could allow for command injection via time_tzsetup.cgi.

NVD Source

CISA KEV Advisory

Digiever DS-2105 Pro Missing Authorization Vulnerability

Digiever DS-2105 Pro contains a missing authorization vulnerability which could allow for command injection via time_tzsetup.cgi.

Added to KEV: 2025-12-22Federal patch deadline: 2026-01-12

Required Action (CISA)

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Risk Analysis

Digiever DS-2105 Pro has a missing authorization vulnerability that allows for command injection via time_tzsetup.cgi. The CVSS score of 8.8 (High) and high EPSS score of 0.67483 indicate a significant risk of exploitation, further confirmed by its presence in CISA's KEV.

This vulnerability is actively exploited in the wild, as confirmed by its inclusion in CISA's KEV. It is remotely exploitable with low complexity and requires low privileges.

Recommended Action

Digiever DS-2105 Pro users should apply the latest security updates provided by the vendor. Implement strong access controls and monitor for unusual activity on affected devices.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2023-52163 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.8.

CISA has added CVE-2023-52163 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.