U.S. CISA Adds a Flaw in Digiever DS-2105 Pro to Its Known Exploited Vulnerabilities Catalog

U.S. CISA adds a flaw in Digiever DS-2105 Pro to its Known Exploited Vulnerabilities catalog

美国网络安全和基础设施安全局（CISA）将Digiever DS-2105 Pro设备中的一个高危命令注入漏洞（CVE-2023-52163）加入其已知被利用漏洞目录。该漏洞允许攻击者通过特制HTTP请求执行任意操作系统命令，可能导致设备完全被控制。由于该设备已停产且无补丁可用，CISA要求联邦机构于2026年1月12日前修复此漏洞，并建议私营组织也采取相应措施应对风险。

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog ggaylor Dec 22, 2025 Release DateDecember 22, 2025 DescriptionCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.CVE-2023-52163 Digiever DS-2105 Pro Missing Authorization Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal e…