CVE-2024-22811

The Tormach xsTECH CNC Router is affected by a vulnerability in the PathPilot Controller v2.9.6 . An attacker can trigger a Denial of Service (DoS) by overwriting the Hostmot2 configuration cookie in the device memory, which disrupts the communication between the PathPilot controller and the CNC ...

CVE-2024-22811

An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service DoS by disrupting the communication between the PathPilot controller and the CNC router via overwriting the Hostmot2 configuration cookie in the device memory...

CVE-2024-22809

The Tormach xsTECH CNC Router is affected by an incorrect access control vulnerability in the PathPilot Controller v2.9.6 . This flaw allows an attacker to access the G code's shared folder , which may lead to the exposure of sensitive information . As a temporary workaround until a patch is avai...

CVE-2024-22813

The Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 is vulnerable to an issue that allows attackers to overwrite a hardcoded IP address located in the device memory. Successful exploitation results in the disruption of network connectivity between the router and the controller. As of the c...

CVE-2024-22813

An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite the hardcoded IP address in the device memory, disrupting network connectivity between the router and the controller...

CVE-2024-22815

The Tormach xsTECH CNC Router is affected by a vulnerability in its PathPilot Controller v2.9.6 . An issue within the communication protocol allows an attacker to trigger a Denial of Service (DoS) by sending crafted commands . To mitigate this risk while a patch is unavailable, it is recommended ...

Tormach PathPilot Controller 安全漏洞

Tormach PathPilot Controller is a series of controllers from Tormach USA. A security vulnerability exists in Tormach PathPilot Controller version v2.9.6. An attacker could exploit this vulnerability to cause a denial of service DoS by overriding the Hostmot2 configuration cookie in the device's...

CVE-2024-22809: Improper Handling of Syntactically Invalid Structure

Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access the G code's shared folder and view sensitive information...