Critical Vulnerabilities in Tank Gauge Systems Expose Gas Stations to Remote Attacks
Six different Automatic Tank Gauge (ATG) systems from five manufacturers have been found to have critical security vulnerabilities, exposing them to potential remote attacks.
"These vulnerabilities pose serious risks, as they could be exploited by malicious actors to cause widespread damage, including physical harm, environmental hazards, and economic losses," said Pedro Umbelino, a researcher at Bitsight, in a report published last week.
The analysis revealed that thousands of ATGs are accessible via the internet, making them attractive targets for cyberattacks aimed at disrupting gas stations, hospitals, airports, military bases, and other critical infrastructure.
ATGs are sensor systems used to monitor storage tank levels, such as fuel tanks, to detect leaks and other parameters. Exploiting security flaws in these systems could lead to severe consequences like denial-of-service (DoS) and physical damage.
The 11 newly discovered vulnerabilities affect six ATG models: Maglink LX, Maglink LX4, OPW SiteSentinel, Proteus OEL8000, Alisonic Sibylla, and Franklin TS-550.
Eight of the 11 flaws are rated critical in severity
For Further Reference