CVE-2024-22811

The Tormach xsTECH CNC Router is affected by a vulnerability in the PathPilot Controller v2.9.6 . An attacker can trigger a Denial of Service (DoS) by overwriting the Hostmot2 configuration cookie in the device memory, which disrupts the communication between the PathPilot controller and the CNC ...

CVE-2024-22813

The Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 is vulnerable to an issue that allows attackers to overwrite a hardcoded IP address located in the device memory. Successful exploitation results in the disruption of network connectivity between the router and the controller. As of the c...

CVE-2024-22807

The Tormach xsTECH CNC Router (PathPilot Controller v2.9.6 ) is vulnerable to an issue involving Improper Access Control (CWE-20284 ). This vulnerability allows attackers to erase a critical sector of the flash memory , which results in firmware corruption and a loss of network connectivity for t...

CVE-2024-22815

The Tormach xsTECH CNC Router is affected by a vulnerability in its PathPilot Controller v2.9.6 . An issue within the communication protocol allows an attacker to trigger a Denial of Service (DoS) by sending crafted commands . To mitigate this risk while a patch is unavailable, it is recommended ...

CVE-2024-22809

The Tormach xsTECH CNC Router is affected by an incorrect access control vulnerability in the PathPilot Controller v2.9.6 . This flaw allows an attacker to access the G code's shared folder , which may lead to the exposure of sensitive information . As a temporary workaround until a patch is avai...

CVE-2024-22808

The Tormach xsTECH CNC Router with PathPilot Controller v2.9.6 is vulnerable to a Denial of Service (DoS) . An attacker can cause this by overwriting the card's name in the device memory, which disrupts the communication between the PathPilot controller and the CNC router. As a temporary workarou...