3 ms·
"...approximately 5,800 ATGs with TCP port 10001 exposed to the internet and no password set." Are we talking about simple monitoring information here, or some
by delinka 12y ago
"...approximately 5,800 ATGs with TCP port 10001 exposed to the internet and no password set."
Are we talking about simple monitoring information here, or some kind of administrative access?
"In our opinion, remote access to the control port of an ATG could provide an attacker with the ability to reconfigure alarm thresholds, reset the system, and otherwise disrupt the operation of the fuel tank."
Remote access to a control port would indeed conceivably allow these activities, no "in our opinion" required. But you haven't told me whether this is indeed remote access to a control port.
Also, the ISP pie graph just looks like a typical distribution of customers across ISPs. How useful is this supposed to be?
- deleted 12y ago[deleted]
- bchociej 12y agoWell, the docs for these things are online and there are hundreds of opcodes. Some are less benign than "inventory status". One hopes that any of the "S" opcodes ("set" as opposed to "inquire" or "I" opcodes) are protected by the " System RS-232 Security Code", but I'm not about to try to find out.
- jschwartzi 12y agoOne would also hope that the System RS-232 Security Code is actually unique to each device and is not simply specified in a manual somewhere.
- jrochkind1 12y agoI'm guessing the "Systems RS-232 Security Code" is a 4-digit numeric PIN, or at any rate a fairly low-entropy password normally, and that there is absolutely no rate-limiting or monitoring or other guard against a live brute force attack. It looks like the documentation's been taken down from the URL included in the OP. I'm sure it's available elsewhere, but I haven't tried to find it.
- TheCapn 12y agoISP pie graph might help indicate that this is an industry problem rather than something a regional implementation group is guilty of.
- morsch 12y agoEven if this were just monitoring access, that's just a privilege escalation away from full access.
- Joona 12y ago>Yeah - about 40% of them have the management port open. I can see how they could be bricked. Not good. https://www.reddit.com/r/netsec/comments/2te5h8/the_internet_of_gas_station_tank_gauges_thousands/cnyiswa https://www.reddit.com/r/netsec/comments/2te5h8/the_internet...