description: Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via tools_firmware.cgi date parameter, time parameter, and offset parameter.
problem types: OS Command Injection
affected:
{
product: HC100RC
vendor: NEC Corporation
versions:
status: affected, version: Ver1.0.1 and earlier
}