Macgregor vulnerabilities
Published CVEs affecting Macgregor products: 5 record(s), with severity, exploitation and fixes.
CVE-2026-44611
Medium · 5.4
CWE-916 May 29, 2026
MacGregor Voyage Data Recorder (VDR) G4e Use of Password Hash With Insufficient Computational Effort
Danelec MacGregor Voyage Data Recorder
passwords are stored with a hashing method which limits password length and is susceptible to brute force attacks.
CVE-2026-42951
Medium · 5.4
CWE-522 May 29, 2026
MacGregor Voyage Data Recorder (VDR) G4e Insufficiently Protected Credentials
An authenticated
user can download a backup of the Danelec MacGregor Voyage Data Recorder
device which includes account data and password hashes.
CVE-2026-42941
High · 8.3
CWE-1392 May 29, 2026
MacGregor Voyage Data Recorder (VDR) G4e Use of Default Credentials
The Danelec MacGregor Voyage Data Recorder
device includes a default username and password, with no enforced password change.
CVE-2026-42929
High · 8.3
CWE-798 May 29, 2026
MacGregor Voyage Data Recorder (VDR) G4e Use of Hard-coded Credentials
Danelec MacGregor Voyage Data Recorder
includes default accounts with hard-coded credentials.
CVE-2026-40425
Medium · 4.9
CWE-552 May 29, 2026
MacGregor Voyage Data Recorder (VDR) G4e Files or Directories Accessible to External Parties
The administrator account for the
Danelec MacGregor Voyage Data Recorder
web interface can directly edit sensitive files related to authentication, potentially changing the root password.