Cisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote attackers to set the system time via a crafted POST request, aka Bug ID CSCuy01457.
http://www.securitytracker.com/id/1035036
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160216-wap