VULNERABILITY INTELLIGENCE

CVE-2024-22813

CVSS score4.4 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2024-04-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Description

An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite the hardcoded IP address in the device memory, disrupting network connectivity between the router and the controller.

Weakness classification

  • CWE-798: Use of Hard-coded Credentials

Primary references