Automatic tank gauge vendors alerted of software vulnerabilities in their products

Bitsight TRACE and CISA disclosed ten critical vulnerabilities across five automatic tank gauge (ATG) products (Proteus OEL8000, Sibylla, SiteSentinel, MagLink, TS-550) used in fuel storage at airports, hospitals, and industrial sites; one MagLink issue is CVSS 10.0 and researchers demonstrated exploitability in a testbed. Hundreds of devices were found exposed online, some vendors provided mitigations while others did not respond, and although researchers warn of potentially severe impacts, no evidence of widespread in-the-wild exploitation was reported.