Internet attack could shut down US gas stations

  • 23 January 2015
  • 0 replies
  • 5 views

Userlevel 7
Badge +54
I think it is time that security was actually classed as of paramount importance with devices which are classed as automatic and  "connected" we are hearing of far too many things like this these days. It is not hard to imagine that a large and concerted attack across several industries/services could cause havoc.
 

More than 5,000 service stations use a monitoring unit vulnerable to attack.

by Robert Lemos - Jan 22 2015
 
A device used to monitor the gasoline levels at refueling stations across the United States—known as an automated tank gauge or ATG—could be remotely accessed by online attackers, manipulated to cause alerts, and even set to shut down the flow of fuel, according to research to be published on Thursday.
The security weakness—identified by Jack Chadowitz, a former process control engineer and founder of control-system monitoring service BostonBase—could theoretically affect the devices at many of the approximately 115,000 fueling stations in the United States, but only a small fraction of those systems—about 5,300—appear to be vulnerable to an Internet attack, according to security firm Rapid7, which conducted a scan for such devices on January 10. While automated tank gauges are typically accessed to monitor fuel inventories, so as to know when to order gasoline, attackers could also access the settings, Chadowitz said.
“One could change the calibration and make the tank report full or empty,” he told Ars. “If you report the tank is full, no one is going to order fuel.”
 
Full Article

0 replies

Be the first to reply!

Reply