An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite the hardcoded IP address in the device memory, disrupting network connectivity between the router and the controller.
References
| Link | Resource |
|---|---|
| https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 | Third Party Advisory |
| https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
15 Sep 2025, 16:18
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Tormach pathpilot Controller
Tormach xstech Cnc Router Tormach |
|
| References | () https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 - Third Party Advisory | |
| CPE | cpe:2.3:a:tormach:pathpilot_controller:2.9.6:*:*:*:*:*:*:* cpe:2.3:h:tormach:xstech_cnc_router:-:*:*:*:*:*:*:* |
21 Nov 2024, 08:56
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 - |
03 Jul 2024, 01:47
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-798 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.4 |
22 Apr 2024, 13:28
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-22 12:15
Updated : 2025-09-15 16:18
NVD link : CVE-2024-22813
Mitre link : CVE-2024-22813
CVE.ORG link : CVE-2024-22813
JSON object : View
Products Affected
tormach
- xstech_cnc_router
- pathpilot_controller
CWE
CWE-798
Use of Hard-coded Credentials