Vulnerability Description
access_device.cgi on Digiever DS-2105 Pro 3.1.0.71-11 devices allows arbitrary file read. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score
5.1
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Related Weaknesses (CWE)
References
- https://www.akamai.com/blog/security-research/digiever-fix-that-iot-thing
- https://www.txone.com/blog/digiever-fixes-sorely-needed/
FAQ
What is CVE-2023-52164?
CVE-2023-52164 is a vulnerability with a CVSS score of 5.1 (MEDIUM). access_device.cgi on Digiever DS-2105 Pro 3.1.0.71-11 devices allows arbitrary file read. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
How severe is CVE-2023-52164?
CVE-2023-52164 has been rated MEDIUM with a CVSS base score of 5.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-52164?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.