Researchers have identified multiple critical security vulnerabilities in automatic tank gauge (ATG) systems, some of which remain unpatched. These vulnerabilities pose a threat to critical infrastructure facilities, potentially leading to disruption and physical damage. ATGs are sensor systems designed to monitor and manage fuel storage tanks. They ensure that fill levels are within the appropriate range, detect leaks in real time, and manage inventory. ATGs can be found in various locations, such as gas stations, airports, and other less apparent installations, such as military facilities and hospitals. If exploited, these vulnerabilities pose significant risks and could cause widespread damage, including physical damage, environmental hazards, and economic losses.

Recommendations

• Identify all ATG systems deployed by your organization and third-party business partners and assess the security of these systems.
• Apply updates immediately after appropriate testing.
• Ensure all ATG systems are not open to the internet.
• Employ safeguards such as firewalls to protect against unauthorized access to ATG systems.