# Federal Agencies Warn of Active Attacks on Tank Monitoring Systems Across U.S. Energy and Agriculture Sectors


Eight U.S. government agencies—including CISA, the FBI, NSA, and DOE—have issued an urgent warning about ongoing cyberattacks targeting automatic tank gauge (ATG) systems used throughout critical infrastructure. The advisory highlights a disturbing trend: threat actors are actively exploiting internet-exposed systems that monitor fuel supplies, chemical storage, and agricultural products across the nation's most vital industries.


## The Threat


Automatic tank gauge systems are the backbone of remote monitoring for storage tanks across energy facilities, chemical plants, food production facilities, and transportation hubs. These devices track liquid levels, temperature, and potential leaks—functions critical to both operational safety and environmental protection. For decades, these systems operated in relative obscurity; few expected them to become a target of sophisticated cyber operations. That assumption is now proving dangerously wrong.


The threat is straightforward but severe: cyber threat actors have begun systematically compromising ATG systems by exploiting a combination of weak authentication practices and unpatched software vulnerabilities. Once inside, attackers can execute arbitrary commands, bypass authentication entirely, and escalate their privileges to gain full administrative control. This isn't a single vulnerability in a single product—it's a pattern of systemic weaknesses across multiple manufacturers and deployments, many of which have been internet-exposed for years without proper access controls.


What makes this particularly alarming is the operational impact. An attacker with control over a tank gauge system doesn't just gain telemetry data; they can actively manipulate what the system reports, alter pump settings, disable safety alerts, and create conditions that could trigger environmental disasters. A compromised ATG could trick operators into overfilling a tank, mask a critical leak, or trigger equipment failures that cause cascading damage to the tank itself. The attacker needs no physical access—no drilling, no breaking glass. They simply need internet connectivity and a weak password.


The authoring organizations have not yet attributed this activity to a specific nation-state or known threat actor group, but the coordinated nature of the warnings and the breadth of agencies involved suggests this is an active, ongoing campaign rather than isolated incidents.


## Severity and Impact


| Aspect | Details |

|--------|---------|

| Vulnerability Type | Multiple: Authentication Bypass, Hardcoded Credentials, OS Command Execution, SQL Injection, Privilege Escalation |

| CVSS Score | Varies by specific vulnerability; authentication bypass and command execution typically CVSS 8.0–9.8 |

| Attack Vector | Network (internet-exposed systems on default ports 8001, 9001, 10001) |

| Authentication Required | None (for authentication bypass attacks) |

| Attack Complexity | Low |

| Affected Sectors | Energy, Chemical, Food & Agriculture, Transportation Systems |

| Operational Impact | Critical — attackers can alter system settings, disable alerts, cause equipment damage, create environmental hazards |

| Current Status | Active exploitation observed; no attribution to specific threat actor |


## Affected Products


ATG systems from multiple manufacturers are affected, though the advisory does not name specific vendors. Organizations running the following common ATG deployments should assume risk:


  • Veeder-Root TLS series (widely deployed in energy and fuel sectors)
  • Franklin Fueling Systems (fuel distribution and airport systems)
  • Incon Systems (tank monitoring)
  • Computrols (environmental monitoring and tank management)
  • Magellan (fuel level monitoring)
  • OPW (fuel management systems)

    • Any ATG system exposed directly to the internet on ports 8001, 9001, 10001, or other web management interfaces without authentication or with default credentials should be considered compromised until proven otherwise.


    ## Mitigations


    The agencies recommend immediate action across three critical areas:


    1. Eliminate Internet Exposure

  • Do not expose ATG serial ports or web management interfaces directly to the internet
  • If remote access is required, implement it only through a VPN with certificate-based authentication
  • Use firewalls and access control lists to restrict connections to known, legitimate administrator IP addresses
  • Consider network segmentation to isolate ATG systems from general corporate networks

    • 2. Enforce Credential Security

  • Change all default passwords immediately—this is not optional
  • Implement strong, unique passwords (minimum 16 characters with mixed case, numbers, and symbols)
  • Implement phishing-resistant multifactor authentication (MFA) wherever the ATG system supports it
  • Document all credentials in a secure password manager; do not share passwords via email or chat
  • Audit all existing user accounts and delete unused credentials

    • 3. Apply Security Updates

  • Contact your ATG service provider to determine if patches are available for your specific system
  • Test patches in a controlled environment before production deployment
  • Many ATG vendors have released firmware updates addressing authentication bypass and command execution flaws
  • Document the version and patch status of every ATG system in your inventory

    • Additional hardening:

  • Implement monitoring and alerting on ATG system logins and configuration changes
  • Log all administrative access and retain logs for at least 90 days
  • Conduct a vulnerability scan of your ATG systems from a trusted network segment
  • If you cannot immediately patch, isolate the affected system from the network and implement manual monitoring until a fix is available

    • ## References


  • CISA Alert: [Authoring Organizations Urge Hardening Automatic Tank Gauge Systems](https://www.cisa.gov/alerts/)
  • CISA Product Security Advisories: [https://www.cisa.gov/](https://www.cisa.gov/)
  • FBI IC3 Reporting: [https://www.ic3.gov/](https://www.ic3.gov/)
  • ATG Manufacturer Security Updates:

    • - Veeder-Root: Check your service portal for firmware updates

    - Franklin Fueling Systems: Contact field service for patch availability

    - Other vendors: Consult your service agreements and vendor security pages


    ---


    ## HackWire Analysis


    This advisory reveals a troubling gap in how American critical infrastructure secures its most mundane-sounding but operationally vital systems. Tank gauge monitoring doesn't grab headlines the way a power grid outage might, but the consequences of a compromised ATG could be just as serious: environmental disasters, supply chain disruption, or dangerous safety failures at fuel distribution points.


    The real story here isn't the technical sophistication of the attacks—authentication bypass and command execution are commodity-grade exploits. The story is that these systems exist on the internet in the first place, running default credentials years after deployment. This suggests a fundamental breakdown in security practices at multiple operational levels: vendors shipping systems with hardcoded credentials, operators failing to change defaults, and management treating tank monitoring as "not IT" and therefore not subject to security policies.


    The timing of this coordinated eight-agency warning is significant. It's rare to see CISA, NSA, FBI, and DOE speak in unison unless the threat is both active and spreading. The lack of threat actor attribution suggests the U.S. government may still be investigating whether this is state-sponsored or criminal activity—but the urgency of the warning indicates they're not waiting for attribution to push protective measures.


    One detail worth emphasizing: an attacker who compromises an ATG doesn't just steal data. They can falsify what operators see on their screens. A tank that appears 20% full might actually be 95% full. A critical leak might be hidden by a malicious alert suppression. This is not a confidentiality breach—it's an integrity attack that could cause physical harm. That's why network segmentation matters here more than it might for other systems: you cannot patch your way out of this if your attacker can still reach the system. The only reliable defense is air-gapping or strict VPN-only access.


    Organizations in energy, logistics, and food production should treat this advisory as a call to action, not a suggestion. Inventory your ATG systems today, pull them off the public internet tonight, and coordinate with your vendor for patches this week. — HackWire Editorial


    ## Related Coverage


  • Read more in our [Vulnerabilities](https://www.hackwire.news/category/vulnerabilities) coverage
  • Cross-reference with [Critical Infrastructure](https://www.hackwire.news/category/critical-infrastructure) and [Policy](https://www.hackwire.news/category/policy)
  • Stay current via the [HackWire homepage](https://www.hackwire.news/)