Quick Summary
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged a vulnerability in the Digiever DS-2105 Pro network video recorders (NVRs), tracked as CVE-2023-52163, which allows for remote code execution. This vulnerability, with a CVSS score of 8.8, is being actively exploited by threat actors to deploy botnets like Mirai and ShadowV2. Users are advised to take immediate action, as the device has reached end-of-life status and remains unpatched.
The Securityish Brief
CISA has added the Digiever DS-2105 Pro NVR vulnerability, identified as CVE-2023-52163, to its Known Exploited Vulnerabilities catalog due to evidence of active exploitation. This vulnerability involves command injection, allowing remote code execution after an attacker logs into the device. The CVSS score for this vulnerability is 8.8, indicating a high severity level.
Reports from Akamai and Fortinet have highlighted how threat actors are exploiting this flaw to deliver botnets, specifically Mirai and ShadowV2. These botnets can significantly impact network security by enabling unauthorized access and control over devices.
Additionally, there is another related vulnerability, CVE-2023-52164, which allows arbitrary file reading and has a CVSS score of 5.1. Both vulnerabilities remain unpatched as the Digiever DS-2105 Pro has reached end-of-life status, meaning it will no longer receive updates or security fixes.
CISA has recommended that Federal Civilian Executive Branch agencies implement necessary mitigations or discontinue use of the product by January 12, 2025, to protect their networks from active threats. Users are urged to avoid exposing the device to the internet and to change default usernames and passwords to enhance security.
Understanding the Risks
The exploitation of the Digiever DS-2105 Pro vulnerability underscores the risks associated with using outdated devices that no longer receive security updates. Organizations and users should be aware of the potential for significant security breaches if such vulnerabilities are not addressed.
As cyber threats evolve, it is crucial for users to monitor their devices and ensure that they are not exposed to unnecessary risks. Changing default credentials and limiting internet exposure can help mitigate some of the risks associated with this vulnerability.
Key Takeaways
- Change the default username and password on your Digiever DS-2105 Pro NVR to enhance security.
- Avoid exposing the device to the internet to reduce the risk of exploitation.
- Monitor for updates from CISA regarding vulnerabilities and necessary mitigations.
- Consider discontinuing use of the Digiever DS-2105 Pro NVR if it is no longer supported with security patches.
- Review your network security policies to ensure they address potential risks from outdated devices.
Key Terms & Concepts
- CVE-2023-52163: In this article, CVE-2023-52163 refers to a vulnerability in the Digiever DS-2105 Pro NVR that allows remote code execution.
- CISA: CISA stands for the U.S. Cybersecurity and Infrastructure Security Agency, which monitors and responds to cybersecurity threats.
- CVSS: CVSS, or Common Vulnerability Scoring System, is a standardized method for rating the severity of security vulnerabilities.
- Mirai: Mirai is a type of botnet malware that exploits vulnerabilities in IoT devices to launch distributed denial-of-service attacks.
- ShadowV2: ShadowV2 is a variant of malware that has been reported to exploit vulnerabilities in devices like the Digiever DS-2105 Pro.
Read the original article here: https://thehackernews.com/2025/12/cisa-flags-actively-exploited-digiever.html
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
