Skip to content
OpenAdvisories

Vendor

Danelec

5 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 5.7

    MacGregor Voyage Data Recorder (VDR) G4e Files or Directories Accessible to External Parties

    The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password.

  • Medium 5.4

    MacGregor Voyage Data Recorder (VDR) G4e Use of Password Hash With Insufficient Computational Effort

    Danelec MacGregor Voyage Data Recorder passwords are stored with a hashing method which limits password length and is susceptible to brute force attacks.

  • Medium 5.4

    MacGregor Voyage Data Recorder (VDR) G4e Insufficiently Protected Credentials

    An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device which includes account data and password hashes.