Skip to content
OpenAdvisories
High ICSA-26-148-01 5 CVEs

MacGregor Voyage Data Recorder (VDR) G4e

Published May 28, 2026 · Updated May 28, 2026

Vendor: Danelec Product: MacGregor Voyage Data Recorder (VDR) G4e

Summary

Successful exploitation of these vulnerabilities could result in an attacker gaining administrator access to the device.

Vulnerabilities 5

  • High 8.3
    CVE-2026-42929

    MacGregor Voyage Data Recorder (VDR) G4e Use of Hard-coded Credentials

    Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials.

    Danelec MacGregor Voyage Data Recorder (VDR) G4e
  • High 8.3
    CVE-2026-42941

    MacGregor Voyage Data Recorder (VDR) G4e Use of Default Credentials

    The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password change.

    Danelec MacGregor Voyage Data Recorder (VDR) G4e
  • Medium 5.7
    CVE-2026-40425

    MacGregor Voyage Data Recorder (VDR) G4e Files or Directories Accessible to External Parties

    The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password.

    Danelec MacGregor Voyage Data Recorder (VDR) G4e
  • Medium 5.4
    CVE-2026-42951

    MacGregor Voyage Data Recorder (VDR) G4e Insufficiently Protected Credentials

    An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device which includes account data and password hashes.

    Danelec MacGregor Voyage Data Recorder (VDR) G4e
  • Medium 5.4
    CVE-2026-44611

    MacGregor Voyage Data Recorder (VDR) G4e Use of Password Hash With Insufficient Computational Effort

    Danelec MacGregor Voyage Data Recorder passwords are stored with a hashing method which limits password length and is susceptible to brute force attacks.

    Danelec MacGregor Voyage Data Recorder (VDR) G4e

Revision history

  1. #1

    Initial Publication

References