Threat database

Certain models of NVR developed by Digiever has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.

EPSS 1.1%VulnerabilityDigiever#cwe-78Germany+9

Certain models of NVR developed by Digiever has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remoter attackers to access the system configuration file and obtain plaintext credentials of the NVR and its connected cameras.

EPSS 0.5%VulnerabilityDigiever#cwe-497Germany+9

CVE-2023-52163 is a high-severity command injection vulnerability affecting Digiever DS-2105 Pro devices running firmware version 3.1.0.71-11. The flaw exists in the time_tzsetup.cgi endpoint, allowing an authenticated attacker with low privileges to execute arbitrary commands remotely without user interaction. This vulnerability impacts confidentiality, integrity, and availability, potentially enabling full system compromise. The affected products are no longer supported by the vendor, and no patches are available. Although no known exploits are currently observed in the wild, the ease of exploitation and critical impact make this a significant risk. European organizations using these legacy devices should prioritize mitigation to prevent potential attacks.

KEVEPSS 96%VulnerabilityDigieverGermanyFrance+6