Welker OdorEyes EcoSystem Pulse Bypass System Remote PLC Manipulation Vulnerability

A vulnerability exists in the Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller, allowing remote manipulation of the device's underlying programmable logic controller (PLC) without proper safeguards or authentication. This issue could lead to incorrect odorization levels, either too high or too low.

Impact

Exploitation of this vulnerability could cause an over- or under-odorization event, disrupting the intended chemical processes.

Remediation

Welker has not responded to CISA's coordination efforts. Users are encouraged to contact Welker and keep their systems updated.