Gas Stations, Hospitals, And Military Bases At Serious Risk Of Damage

Recent research has uncovered critical security vulnerabilities in six different Automatic Tank Gauge (ATG) systems from five manufacturers, posing significant risks to various industries and critical infrastructure. These vulnerabilities, if exploited, could allow threat actors to remotely attack gas stations, airports, hospitals, military bases, and other vital facilities. The potential consequences include not only cyber damage but also physical harm, environmental hazards, and substantial economic losses.

Understanding the Vulnerability

Automatic Tank Gauges (ATGs) are sensor systems designed to monitor the levels and conditions of storage tanks, such as those used for fuel. These systems help detect leaks and monitor essential parameters to ensure safety and efficiency. However, researchers from Bitsight have uncovered 11 vulnerabilities in six ATG models, including Maglink LX, Maglink LX4, OPW SiteSentinel, Proteus OEL8000, Alisonic Sibylla, and Franklin TS-550.

The vulnerabilities range from OS command injection and SQL injection to authentication bypass and privilege escalation. Eight of these flaws are rated as "critical" with CVSS (Common Vulnerability Scoring System) scores between 9.1 and 10.0. Some of the most severe vulnerabilities include:

• CVE-2024-45066: OS command injection in Maglink LX (CVSS score: 10.0)

• CVE-2024-43423: Hard-coded credentials in Maglink LX4 (CVSS score: 9.8)

• CVE-2024-8310: Authentication bypass in OPW SiteSentinel (CVSS score: 9.8)

• CVE-2024-8630: SQL injection in Alisonic Sibylla (CVSS score: 9.4)

The most dangerous of these vulnerabilities could allow attackers to gain full administrator privileges, take over the system, and, in the worst cases, cause the devices to operate in ways that could lead to physical damage.

Who is at Risk?

The vulnerabilities in ATG systems represent a serious threat to industries and infrastructure that rely on these devices to manage and monitor their storage tanks. The risks extend to:

1. Gas Stations: ATG systems at gas stations monitor fuel levels and detect leaks. A cyberattack on these systems could lead to fuel shortages, operational shutdowns, or even physical damage to fuel tanks.

2. Airports and Hospitals: Airports and hospitals rely heavily on ATG systems for fuel management. Disruptions in fuel supply or monitoring could cause significant operational and safety issues, potentially affecting emergency services and flights.

3. Military Bases: Military facilities using ATG systems to monitor fuel and other critical supplies could be vulnerable to attacks that disrupt operations or compromise sensitive data.

4. Critical Infrastructure: Beyond the specific industries mentioned, any facility that uses ATG systems for monitoring hazardous materials or critical supplies could be at risk. The consequences of an attack could lead to environmental damage or interruptions in essential services.

How to Protect Yourself

The potential for ATG vulnerabilities to be exploited underscores the importance of proactive security measures. Here are steps that organizations can take to protect themselves from these critical risks:

1. Regular Software and Firmware Updates

Manufacturers have issued patches to address the vulnerabilities discovered in ATG systems. Organizations must ensure they install all relevant updates and firmware patches promptly. Failing to do so leaves systems exposed to known threats.

2. Restrict Internet Exposure

One of the most alarming findings in the research was that thousands of ATG systems are exposed to the internet, making them easy targets for cybercriminals. To reduce risk, organizations should restrict or completely eliminate internet access for ATG systems. Implementing firewalls and virtual private networks (VPNs) can also add layers of protection.

3. Strengthen Authentication Mechanisms

Many of the vulnerabilities involve authentication bypass techniques. Organizations should review their authentication protocols and ensure they implement multi-factor authentication (MFA) where possible. Hard-coded credentials should be replaced with strong, unique passwords that are regularly updated.

4. Monitor Network Traffic and System Logs

Organizations should continuously monitor their network traffic and system logs for any suspicious activity. Early detection of abnormal behavior can prevent an attack from escalating. Intrusion detection systems (IDS) and intrusion prevention systems (IPS) can be used to identify and stop malicious activity.

5. Conduct Regular Security Audits

Performing regular security audits and penetration tests on ATG systems can help identify weaknesses and ensure that the systems are adequately protected. Engaging cybersecurity professionals to assess the infrastructure can prevent vulnerabilities from being exploited.

Conclusion

The vulnerabilities in ATG systems present a significant risk to critical infrastructure, with potential consequences ranging from operational disruptions to physical damage and environmental hazards. Organizations that rely on these systems must take immediate action to patch their systems, strengthen security protocols, and reduce their exposure to cyber threats. As technology advances and more systems become connected, the importance of securing these critical devices cannot be overstated.