Data Exposure Vulnerability in Danelec MacGregor Voyage Data Recorder
CVE-2026-42951

5.9MEDIUM

Key Information:

Vendor

Danelec

Status
Macgregor Voyage Data Recorder (vdr) G4e
Vendor
CVE Published:
29 May 2026

What is CVE-2026-42951?

The Danelec MacGregor Voyage Data Recorder has a security issue that allows authenticated users to download sensitive backup files containing account data and password hashes. This vulnerability could lead to unauthorized access to user accounts, potentially compromising the integrity and confidentiality of sensitive data. It is crucial for users to assess their exposure and take necessary precautions to secure their systems.

Affected Version(s)

MacGregor Voyage Data Recorder (VDR) G4e 0 < 5.250

References

https://www.danelec.com/contact
https://www.cisa.gov/news-events/ics-advisories/icsa-26-1...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andrew Tierney of Pen Test Partners reported these vulnerabilities to CISA.
.