CVE-2026-42951

Analyzed Analyzed - Analysis Complete

Authenticated Backup Download Exposes Credentials in Danelec MacGregor Voyage Data Recorder

Publication date: 2026-05-29

Last updated on: 2026-06-04

Assigner: ICS-CERT

Description

An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device which includes account data and password hashes.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-29

Last Modified

2026-06-04

Generated

2026-07-09

AI Q&A

2026-05-29

EPSS Evaluated

2026-07-08

NVD

CVE-2026-42951

EUVD

EUVD-2026-33396

Affected Vendors & Products

Vendor	Product	Version / Range
macgregor	interschalt_vdr_g4e_firmware	to 5.250 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-522	The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

Executive Summary

This vulnerability allows an authenticated user to download a backup of the Danelec MacGregor Voyage Data Recorder device.

The backup includes sensitive information such as account data and password hashes.

Impact Analysis

The vulnerability can lead to unauthorized access to sensitive account data and password hashes if an attacker gains authenticated access.

This could potentially allow further compromise of the device or related systems by exploiting the exposed credentials.

Compliance Impact

This vulnerability allows an authenticated user to download a backup of the Danelec MacGregor Voyage Data Recorder device, which includes account data and password hashes.

Exposure of account data and password hashes could lead to unauthorized access or data breaches, potentially impacting compliance with data protection regulations such as GDPR and HIPAA that require safeguarding personal and sensitive information.

However, specific impacts on compliance are not detailed in the provided information.

Hi! I’m here to help you understand CVE-2026-42951. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70