Brute Force Vulnerability in Danelec MacGregor Voyage Data Recorder
CVE-2026-44611

5.9MEDIUM

Key Information:

Vendor

Danelec

Status
Macgregor Voyage Data Recorder (vdr) G4e
Vendor
CVE Published:
29 May 2026

What is CVE-2026-44611?

The Danelec MacGregor Voyage Data Recorder has a vulnerability where passwords are stored using a hashing method that limits password length, making them susceptible to brute force attacks. This flaw can potentially allow unauthorized access to the system, thereby compromising the integrity and security of sensitive data. It is crucial for users to implement stricter password policies and ensure that their systems are updated to mitigate potential risks associated with this vulnerability.

Affected Version(s)

MacGregor Voyage Data Recorder (VDR) G4e 0 < 5.250

References

https://www.danelec.com/contact
https://www.cisa.gov/news-events/ics-advisories/icsa-26-1...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andrew Tierney of Pen Test Partners reported these vulnerabilities to CISA.
.