Vulnerabilidades de Danelec
CVEs publicadas que afetam produtos de Danelec: 5 registro(s), com severidade, exploração e correções.
CVE-2026-44611
Média · 5.4
CWE-916 29/05/2026
MacGregor Voyage Data Recorder (VDR) G4e Use of Password Hash With Insufficient Computational Effort
Danelec MacGregor Voyage Data Recorder
passwords are stored with a hashing method which limits password length and is susceptible to brute force attacks.
CVE-2026-42951
Média · 5.4
CWE-522 29/05/2026
MacGregor Voyage Data Recorder (VDR) G4e Insufficiently Protected Credentials
An authenticated
user can download a backup of the Danelec MacGregor Voyage Data Recorder
device which includes account data and password hashes.
CVE-2026-42941
Alta · 8.3
CWE-1392 29/05/2026
MacGregor Voyage Data Recorder (VDR) G4e Use of Default Credentials
The Danelec MacGregor Voyage Data Recorder
device includes a default username and password, with no enforced password change.
CVE-2026-42929
Alta · 8.3
CWE-798 29/05/2026
MacGregor Voyage Data Recorder (VDR) G4e Use of Hard-coded Credentials
Danelec MacGregor Voyage Data Recorder
includes default accounts with hard-coded credentials.
CVE-2026-40425
Média · 4.9
CWE-552 29/05/2026
MacGregor Voyage Data Recorder (VDR) G4e Files or Directories Accessible to External Parties
The administrator account for the
Danelec MacGregor Voyage Data Recorder
web interface can directly edit sensitive files related to authentication, potentially changing the root password.