CVEvulnerability
CVE-2024-22813
4.4 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-04-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.4 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-798
Description
An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite the hardcoded IP address in the device memory, disrupting network connectivity between the router and the controller.
Affected configurations
• tormach pathpilot controller 2.9.6
Related
Weakness · CWE (1)
- CWE-798 Use of Hard-coded Credentials weakness
References
- https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 Third Party Advisory
- https://gist.github.com/VcuCyber/51075894d1728db07fc2df286c003df9 Third Party Advisory