CVE-2026-44611
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
In Danelec MacGregor Voyage Data Recorder, passwords are stored with a hashing method that limits password length and is susceptible to brute force attacks.
Risk Assessment
The organization is at risk of easy password guessing by attackers, potentially leading to unauthorized access to the voyage data recorder and data security breaches.
Recommendation
Change the password storage method to a more secure one, such as using strong salted hash functions, and enforce long and complex passwords.
Other vulnerabilities in Danelec MacGregor Voyage Data Recorder
See all- CVE-2026-42951Medium
An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device, which includes account data and password hashes.
- CVE-2026-42941High
The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password change.
- CVE-2026-42929High
The Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials.
- CVE-2026-40425Medium
The administrator account of the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive authentication files, potentially changing the root password.
Original NVD description (English source)
Danelec MacGregor Voyage Data Recorder passwords are stored with a hashing method which limits password length and is susceptible to brute force attacks.