An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control over the device. The vulnerability exists in the configuration daemon's time syn…

{
                    "vendor": "Hitachi Energy",
                    "product": "CoreTec 5",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "3.0.0",
                            "lessThanOrEqual": "5.0.0",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

{
                    "vendor": "Hitachi Energy",
                    "product": "CoreTec 4",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "3.0.0",
                            "lessThanOrEqual": "3.4.0",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }