Digiever DS-2105 Pro contains a missing authorization vulnerability which could allow for command injection via time_tzsetup.cgi.

Digiever DS-2105 Pro contains a missing authorization vulnerability that could allow attackers to perform command injection attacks via the time_tzsetup.cgi endpoint. This security flaw enables unauthorized users to execute commands on the affected system without proper authentication checks. The vulnerability affects the Digiever DS-2105 Pro network video recorder device and poses a high security risk due to the potential for remote command execution.