CVE-2023-52164

CVSS 3.1 Score 5.1 of 10 (medium)

Details

Published Feb 3, 2025
Updated: Feb 5, 2025
CWE ID 284

Summary

CVE-2023-52164 is a vulnerability affecting the access_device.cgi component on Digiever DS-2105 Pro devices running version 3.1.0.71-11. This issue allows an attacker to perform arbitrary file reading. It is important to note that this vulnerability only impacts unsupported devices, as the maintainer no longer provides security updates for them. Successful exploitation could result in the exposure of sensitive information, potentially leading to security breaches. Users of these devices are urged to upgrade to a supported version or consider replacing the affected hardware.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share