PatchTheCVE: tormachhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-22815: An issue in the communication protocol of Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackhttps://patchthecve.com/cve/CVE-2024-22815.htmlhttps://patchthecve.com/cve/CVE-2024-22815.htmlWed, 17 Jun 2026 07:11:46 +0000MEDIUM 5.3: An issue in the communication protocol of Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service (DoS) via crafted commands.CVE-2024-22813: An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite the hardcodedhttps://patchthecve.com/cve/CVE-2024-22813.htmlhttps://patchthecve.com/cve/CVE-2024-22813.htmlWed, 17 Jun 2026 07:11:46 +0000MEDIUM 4.4: An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite the hardcoded IP address in the device memory, disrupting network connectivity between the router and the controller.CVE-2024-22811: An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Servihttps://patchthecve.com/cve/CVE-2024-22811.htmlhttps://patchthecve.com/cve/CVE-2024-22811.htmlWed, 17 Jun 2026 07:11:46 +0000HIGH 8.2: An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service (DoS) by disrupting the communication between the PathPilot controller and the CNC router via overwriting the Hostmot2 configuration cookie in the device memory.CVE-2024-22809: Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access https://patchthecve.com/cve/CVE-2024-22809.htmlhttps://patchthecve.com/cve/CVE-2024-22809.htmlWed, 17 Jun 2026 07:11:46 +0000MEDIUM 6.5: Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access the G code's shared folder and view sensitive information.CVE-2024-22808: An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Servihttps://patchthecve.com/cve/CVE-2024-22808.htmlhttps://patchthecve.com/cve/CVE-2024-22808.htmlWed, 17 Jun 2026 07:11:45 +0000HIGH 7.5: An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service (DoS) by disrupting the communication between the PathPilot controller and the CNC router via overwriting the card's name in the device memory.CVE-2024-22807: An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to erase a critical sectorhttps://patchthecve.com/cve/CVE-2024-22807.htmlhttps://patchthecve.com/cve/CVE-2024-22807.htmlWed, 17 Jun 2026 07:11:45 +0000MEDIUM 6.5: An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to erase a critical sector of the flash memory, causing the machine to lose network connectivity and suffer from firmware corruption.