CISA

GPL Odorizers GPL750

From Cybersecurity and Infrastructure Security Agency ↗

Successful exploitation of this vulnerability could allow a low privileged remote attacker to manipulate register values, which would result in too much or too little odorant being injected into a gas line.

The following versions of GPL Odorizers GPL750 are affected:

GPL750 (XL4) >=v1.0|

GPL750 (XL4 Prime) >=v4.0|

GPL750 (XL7) >=v13.0|

GPL750 (XL7 Prime) >=v18.4|

Vendor

Equipment

GPL Odorizers

GPL Odorizers GPL750

Missing Authentication for Critical Function

Critical Infrastructure Sectors: Critical Manufacturing

Countries/Areas Deployed: Worldwide

Company Headquarters Location: United States

A low-privileged remote attacker can send Modbus packets to manipulate register values that are inputs to the odorant injection logic such that too much or too little odorant is injected into a gas line.

GPL Odorizers GPL750