View CSAF

Summary

Successful exploitation of these vulnerabilities could result in an attacker gaining administrator access to the device.

The following versions of MacGregor Voyage Data Recorder (VDR) G4e are affected:

MacGregor Voyage Data Recorder (VDR) G4e <V5.250

CVSS Vendor Equipment Vulnerabilities

v3 8.3 Danelec MacGregor Voyage Data Recorder (VDR) G4e Use of Default Credentials, Insufficiently Protected Credentials, Use of Password Hash With Insufficient Computational Effort, Use of Hard-coded Credentials, Files or Directories Accessible to External Parties

Background

Critical Infrastructure Sectors: Transportation Systems

Countries/Areas Deployed: Worldwide

Company Headquarters Location: Denmark

Vulnerabilities

Expand All +

CVE-2026-42941

The VDR device includes a default username and password, with no enforced password change.

View CVE Details

Affected Products

MacGregor Voyage Data Recorder (VDR) G4e

Vendor:

Danelec

Product Version:

Danelec MacGregor Voyage Data Recorder…