Over 900 US gas station tank gauge systems exposed to attacks
Over 900 US gas station tank gauge systems are vulnerable to ongoing attacks due to internet exposure and security flaws. Threat actors are exploiting these systems to potentially alter settings and cause operational disruptions. Government agencies have issued a joint advisory urging critical infrastructure organizations to secure these systems immediately.
The vulnerability stems from Automatic Tank Gauge (ATG) systems, which remotely monitor fuel and chemical storage tanks across various sectors. These systems, often found at gas stations and industrial facilities, are susceptible to attacks targeting security weaknesses such as hardcoded credentials, SQL injection, and OS command execution flaws. The U.S. government, alongside agencies like CISA, the FBI, and NSA, has issued a warning about this ongoing threat, highlighting the potential for attackers to disable system alerts and cause equipment damage. Recent reports indicate Iranian-linked hackers have previously targeted similar systems, though the immediate impact of these latest attacks remains under investigation.