← Back

Tormach

tormach

6 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Pathpilot Controller
pathpilot_controller
6 CVEs
Xstech Cnc Router
xstech_cnc_router
0 CVEs

CVEs (6)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-22815
1Tormach
1Pathpilot Controller
Sep 15, 2025
Apr 22, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
An issue in the communication protocol of Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service (DoS) via crafted commands.
CVE-2024-22813
1Tormach
1Pathpilot Controller
Sep 15, 2025
Apr 22, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite the hardcoded IP address in the device memory, disrupting network connectivity between the router and the controller.
CVE-2024-22811
1Tormach
1Pathpilot Controller
Sep 15, 2025
Apr 22, 2024
N/A· v4
8.2 HIGH· v3
N/A· v2
An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service (DoS) by disrupting the communication between the PathPilot controller and the CNC router via overwriting t...Show more
An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service (DoS) by disrupting the communication between the PathPilot controller and the CNC router via overwriting the Hostmot2 configuration cookie in the device memory.Show less
CVE-2024-22809
1Tormach
1Pathpilot Controller
Sep 15, 2025
Apr 22, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access the G code's shared folder and view sensitive information.
CVE-2024-22808
1Tormach
1Pathpilot Controller
Sep 15, 2025
Apr 22, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service (DoS) by disrupting the communication between the PathPilot controller and the CNC router via overwriting t...Show more
An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service (DoS) by disrupting the communication between the PathPilot controller and the CNC router via overwriting the card's name in the device memory.Show less
CVE-2024-22807
1Tormach
1Pathpilot Controller
Sep 15, 2025
Apr 22, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to erase a critical sector of the flash memory, causing the machine to lose network connectivity and suffer from firmware corruption.