Skip to content
OpenAdvisories
Medium · 5.7 CVE-2026-40425 EUVD-2026-33403GHSA-3cp8-799v-mwxm

MacGregor Voyage Data Recorder (VDR) G4e Files or Directories Accessible to External Parties

Published May 29, 2026 · Updated May 29, 2026 · Assigned by icscert

Description

The administrator account for the

Danelec MacGregor Voyage Data Recorder
web interface can directly edit sensitive files related to authentication, potentially changing the root password.

Affected products

VendorProductAffectedFixed
Danelec MacGregor Voyage Data Recorder (VDR) G4e < 5.250 5.250

Advisories 1

References