CVE-2024-22813

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-22813
An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite the hardcoded IP address in the device memory, disrupting network connectivity between the router and the controller.

4.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.7 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 Third Party Advisory
https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:tormach:pathpilot_controller:2.9.6:*:*:*:*:*:*:*
cpe:2.3:h:tormach:xstech_cnc_router:-:*:*:*:*:*:*:*
History

15 Sep 2025, 16:18

Type Values Removed Values Added
CPE cpe:2.3:h:tormach:xstech_cnc_router:-:*:*:*:*:*:*:*
cpe:2.3:a:tormach:pathpilot_controller:2.9.6:*:*:*:*:*:*:*
References () https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 - () https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 - Third Party Advisory
First Time Tormach xstech Cnc Router
Tormach pathpilot Controller
Tormach

21 Nov 2024, 08:56

Type Values Removed Values Added
References () https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 - () https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 -

03 Jul 2024, 01:47

Type Values Removed Values Added
CWE CWE-798
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.4
Summary
  • (es) Un problema en Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 permite a los atacantes sobrescribir la dirección IP codificada en la memoria del dispositivo, interrumpiendo la conectividad de red entre el enrutador y el controlador.

22 Apr 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-22 12:15

Updated : 2025-09-15 16:18

NVD link : CVE-2024-22813

Mitre link : CVE-2024-22813

CVE.ORG link : CVE-2024-22813

JSON object : View

Products Affected

tormach

  • xstech_cnc_router
  • pathpilot_controller
CWE
CWE-798

Use of Hard-coded Credentials