CVE-2024-22813

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-22813
An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite the hardcoded IP address in the device memory, disrupting network connectivity between the router and the controller.

4.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.7 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 Third Party Advisory
https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:tormach:pathpilot_controller:2.9.6:*:*:*:*:*:*:*
cpe:2.3:h:tormach:xstech_cnc_router:-:*:*:*:*:*:*:*
History

15 Sep 2025, 16:18

Type Values Removed Values Added
CPE cpe:2.3:h:tormach:xstech_cnc_router:-:*:*:*:*:*:*:*
cpe:2.3:a:tormach:pathpilot_controller:2.9.6:*:*:*:*:*:*:*
First Time Tormach xstech Cnc Router
Tormach
Tormach pathpilot Controller
References () https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 - () https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 - Third Party Advisory
Information

Published : 2024-04-22 12:15

Updated : 2025-09-15 16:18

NVD link : CVE-2024-22813

Mitre link : CVE-2024-22813

CVE.ORG link : CVE-2024-22813

JSON object : View

Products Affected

tormach

  • xstech_cnc_router
  • pathpilot_controller
CWE
CWE-798

Use of Hard-coded Credentials