CVE-2024-22813: Use of Hard-coded Credentials

An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite the hardcoded IP address in the device memory, disrupting network connectivity between the router and the controller...

PT-2024-19574

Name of the Vulnerable Software and Affected Versions Tormach xsTECH CNC Router, PathPilot Controller version 2.9.6 Description The issue in the communication protocol allows attackers to cause a Denial of Service DoS via crafted commands. Recommendations For version 2.9.6, consider restricting...

CVE-2024-22809: Improper Handling of Syntactically Invalid Structure

Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access the G code's shared folder and view sensitive information...

CVE-2024-22808

An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service DoS by disrupting the communication between the PathPilot controller and the CNC router via overwriting the card's name in the device memory...

CVE-2024-22809

The Tormach xsTECH CNC Router is affected by an incorrect access control vulnerability in the PathPilot Controller v2.9.6 . This flaw allows an attacker to access the G code's shared folder , which may lead to the exposure of sensitive information . As a temporary workaround until a patch is avai...

CVE-2024-22811: Improper Access Control

An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service DoS by disrupting the communication between the PathPilot controller and the CNC router via overwriting the Hostmot2 configuration cookie in the device memory...

CVE-2024-22808: Insecure Storage of Sensitive Information

An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service DoS by disrupting the communication between the PathPilot controller and the CNC router via overwriting the card's name in the device memory...