CVE-2026-42951
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device, which includes account data and password hashes.
Risk Assessment
An attacker with backup access can crack passwords (e.g., via brute-force) and gain unauthorized access to the recorder system.
Recommendation
Restrict backup access and implement strong password hashing (e.g., bcrypt).
Other vulnerabilities in Danelec MacGregor Voyage Data Recorder
See all- CVE-2026-44611Medium
In Danelec MacGregor Voyage Data Recorder, passwords are stored with a hashing method that limits password length and is susceptible to brute force attacks.
- CVE-2026-42941High
The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password change.
- CVE-2026-42929High
The Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials.
- CVE-2026-40425Medium
The administrator account of the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive authentication files, potentially changing the root password.
Original NVD description (English source)
An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device which includes account data and password hashes.