CVE-2026-42941
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password change.
Risk Assessment
Attackers could gain unauthorized access to the device, potentially compromising the recorder's data integrity.
Recommendation
Change the default password to a unique strong password and enforce password change policies.
Other vulnerabilities in Danelec MacGregor Voyage Data Recorder
See all- CVE-2026-44611Medium
In Danelec MacGregor Voyage Data Recorder, passwords are stored with a hashing method that limits password length and is susceptible to brute force attacks.
- CVE-2026-42951Medium
An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device, which includes account data and password hashes.
- CVE-2026-42929High
The Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials.
- CVE-2026-40425Medium
The administrator account of the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive authentication files, potentially changing the root password.
Original NVD description (English source)
The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password change.