CVE-2026-42929
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
The Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials.
Risk Assessment
Attackers could use these default credentials to gain unauthorized access to the device.
Recommendation
Remove or disable default accounts and set unique credentials for each device.
Other vulnerabilities in Danelec MacGregor Voyage Data Recorder
See all- CVE-2026-44611Medium
In Danelec MacGregor Voyage Data Recorder, passwords are stored with a hashing method that limits password length and is susceptible to brute force attacks.
- CVE-2026-42951Medium
An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device, which includes account data and password hashes.
- CVE-2026-42941High
The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password change.
- CVE-2026-40425Medium
The administrator account of the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive authentication files, potentially changing the root password.
Original NVD description (English source)
Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials.