Tomoya Kitagawa

**Name of the Vulnerable Software and Affected Versions** DGM3103SCT (affected versions not specified) **Description** The web management console allows an authenticated user to perform OS command injection, which can lead to arbitrary command execution with root privileges. OS command injection is a flaw where an application passes unsafe user-supplied data to a system shell, allowing the execution of unauthorized operating system commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TP-Link RE300 version V1 **Description** The issue is related to the tdpServer of the TP-Link RE300 V1, which improperly processes its input. This may allow an attacker to cause a denial-of-service (DoS) condition of the product's OneMesh function. The vulnerability is also associated with incorrect clearing or release of resources. **Recommendations** For TP-Link RE300 version V1, consider disabling the OneMesh function as a temporary workaround to minimize the risk of exploitation. Restrict access to the tdpServer to prevent potential attacks until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Global TechStream (GTS) for TOYOTA dealers versions 15.10.032 and earlier **Description** The issue allows an attacker to cause a denial-of-service (DoS) condition and execute arbitrary code via unspecified vectors. **Recommendations** For Global TechStream (GTS) for TOYOTA dealers versions 15.10.032 and earlier, update to a version later than 15.10.032 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** DX Library for Borland C++ versions 3.13f through 3.16b DX Library for Gnu C++ versions 3.13f through 3.16b DX Library for Visual C++ versions 3.13f through 3.16b **Description** The issue allows remote attackers to execute arbitrary code via a crafted string, specifically through the printfDx function. **Recommendations** For DX Library for Borland C++ versions 3.13f through 3.16b, consider disabling the printfDx function until a patch is available. For DX Library for Gnu C++ versions 3.13f through 3.16b, consider disabling the printfDx function until a patch is available. For DX Library for Visual C++ versions 3.13f through 3.16b, consider disabling the printfDx function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Takumi Yamada DX Library versions prior to 3.16 **Description** The issue is related to a buffer overflow in the CL vsprintf function, which allows remote attackers to execute arbitrary code via a crafted string. **Recommendations** For versions prior to 3.16, update to version 3.16 or later to resolve the issue.