CVE-2026-24790
8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Summary
The underlying PLC of the device can be remotely influenced, without proper safeguards or authentication.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Welker | OdorEyes EcoSystem Pulse Bypass System with XL4 Controller | All versions | affected |
Weaknesses
- CWE-306: CWE-306
Workarounds
Welker did not respond to CISA's attempts at coordination. Users of Welker OdorEyes devices are encouraged to contact Welker and keep their systems up to date.
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: partial
References
- https://www.welker.com/contact-us/welker-team
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-04
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-04.json
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.