PT-2024-19573
CVE-2024-22813
·
Published
2024-04-22
·
Updated
2025-09-15
Description by
CVSS 3.1
4.4
MediumMetricsAV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Tormach xsTECH CNC Router, PathPilot Controller version 2.9.6
Description
The issue allows attackers to overwrite the hardcoded IP address in the device memory, disrupting network connectivity between the router and the controller.
Recommendations
For version 2.9.6, consider restricting access to the device memory to prevent overwriting of the hardcoded IP address until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾