The Nefteprodukttekhnika BUK TS-G Gas Station Automation System versions 2.9.1 through 2.10.2 on Linux contain an improper authentication vulnerability (CWE-287) in the system configuration module. This vulnerability could allow an attacker to bypass authentication controls, potentially gaining unauthorized access to system configuration functions. The CVSS 4.0 base score is 9.3, reflecting network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability. No official remediation or patch has been documented at this time.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to gain unauthorized access to the system configuration module of the gas station automation system, potentially leading to unauthorized configuration changes, disruption of service, or compromise of sensitive operational data. The high CVSS score indicates critical impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected system configuration module and monitor for unauthorized access attempts. Follow vendor communications closely for updates on patches or mitigations.