Fuel, Chemicals, Food: CISA Warns ATG Attacks Can Drain Tanks Silently

CISA is warning that attackers are actively targeting automated tank gauges — the networked sensors that tell gas stations, military bases, hospitals, and food manufacturers how much liquid they have and whether any of it is leaking. The advisory covers a category of OT device that most security teams treat as background noise. It shouldn't be.

Three attack patterns are in play. First: authentication bypass and hardcoded credentials, letting attackers walk straight into device management without a valid session. Second: OS command execution and SQL injection against the underlying databases, enabling direct manipulation of gauge readings and logs. Third: privilege escalation to full administrator access. That last one matters because it means an attacker can rewrite what the tank reports, not just read it — a distinction that turns a monitoring device into an active deception layer.

This isn't auth (proving who you are) failing gracefully. These devices often skip the question entirely.

Would MFA have helped? Partially. Forcing step-up authentication before administrative actions would close the bypass routes, but hardcoded credentials are a firmware problem that MFA alone can't patch around. The root issue is that these gauges shipped with the assumption they'd sit on isolated serial networks. Many don't anymore.

CISA's remediation guidance is brief because the attack surface is basic. Remove public internet exposure by severing serial-port connections where possible. Change default passwords immediately — not eventually, immediately. Apply available patches. Report anomalous behavior to CISA. And push the same standards upstream to supply-chain partners.

That list should already be done. A Canadian fuel operator suffered a compromise tied to ATG exposure last year. BitSight flagged these devices as high-value soft targets in 2024. CISOs in critical-infrastructure verticals have had ample warning.

The consequences of ignoring it are concrete: tanks drained without triggering alerts, leaks undetected, chemical inventories silently falsified. The gauges exist to prevent those outcomes. An attacker with admin access turns them into the mechanism that causes those outcomes instead.