Danelec MacGregor VDR G4e Default Credentials and Hardcoded CVEs (ICS Alert)

Vulnerability Overview Vulnerability Name: MacGregor Voyage Data Recorder (VDR) G4e Publication Date: May 28, 2026 Alert Code: ICSA-26-148-01 CVSS Score: 8.3 Vendor: Danelec Device: MacGregor Voyage Data Recorder (VDR) G4e Vulnerability Types: - Use of Default Credentials - Insufficient Protection of Credentials - Use of Password Hashes with Insufficient Computational Effort - Use of Hardcoded Credentials - Files and Directories Accessible by External Actors Affected Components Critical Infrastructure Sector: Transportation Systems Deployed Countries/Regions: Global Company Headquarters Location: Denmark Affected Versions: MacGregor Voyage Data Recorder (VDR) G4e <V5.250 Remediation Recommended Practices: - Minimize network exposure by ensuring that all control system equipment and/or systems are not accessible via the internet. - Place control system networks and remote devices behind firewalls and isolate them from business networks. - Use more secure remote access methods, such as Virtual Private Networks (VPNs), and ensure that VPNs are updated to the latest version. - Conduct appropriate impact analysis and risk assessment before deploying mitigations. - Implement recommended cybersecurity policies to proactively defend ICS assets. - Follow internal procedures to report suspicious malicious activity and submit findings to CISA for tracking and correlation analysis. Vulnerability Details CVE Numbers: - CVE-2026-42941 - CVE-2026-42951 - CVE-2026-44611 - CVE-2026-42929 - CVE-2026-40425 Additional Information Acknowledgements: Andrew Tierney of Pen Test Partners reported these vulnerabilities to CISA. Revision History: - Initial Publication Date: 2026-05-28 - Revision 1: Initial Publication Tags Sector: Transportation Systems Sector Topic: Industrial Control System Vulnerabilities, Industrial Control Systems Related Advisories ABB EIBPORT ABB Busch-Welcome 2 Wire Door Opener Actuator XCharge C6 Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter Legal Notices and Terms of Use This product is subject to these notices and the privacy and use policy. Feedback Please share your thoughts. We have recently updated our anonymous product survey, and feedback is welcome. Related Advisories ABB EIBPORT ABB Busch-Welcome 2 Wire Door Opener Actuator XCharge C6 Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter Back to Top Topics, Highlights, Resources and Tools, News and Events, Careers, About CISA Contact 1-844-Say-CISA contact@cisa.dhs.gov CISA.gov Official website of the U.S. Department of Homeland Security About CISA Budget and Performance DHS.gov FOIA Requests Whistleblower Protection Policy (No FEAR Act) Office of Inspector General Privacy Policy Subscribe White House USA.gov Website Feedback Social Media Facebook X LinkedIn YouTube RSS Legal Notices and Terms of Use This product is subject to these notices and the privacy and use policy. Tags Sector: Transportation Systems Sector Topic: Industrial Control System Vulnerabilities, Industrial Control Systems Feedback Please share your thoughts. We have recently updated our anonymous product survey, and feedback is welcome. Related Advisories ABB EIBPORT ABB Busch-Welcome 2 Wire Door Opener Actuator XCharge C6 Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter Back to Top Topics, Highlights, Resources and Tools, News and Events, Careers, About CISA Contact 1-844-Say-CISA contact@cisa.dhs.gov CISA.gov Official website of the U.S. Department of Homeland Security About CISA Budget and Performance DHS.gov FOIA Requests Whistleblower Protection Policy (No FEAR Act) Office of Inspector General Privacy Policy Subscribe White House USA.gov Website Feedback Social Media Facebook X LinkedIn YouTube RSS Legal Notices and Terms of Use This product is subject to these notices and the privacy and use policy. Tags Sector: Transportation Systems Sector Topic: Industrial Control System Vulnerabilities, Industrial Control Systems Feedback Please share your thoughts. We have recently updated our anonymous product survey, and feedback is welcome. Related Advisories ABB EIBPORT ABB Busch-Welcome 2 Wire Door Opener Actuator XCharge C6 Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter Back to Top Topics, Highlights, Resources and Tools, News and Events, Careers, About CISA Contact 1-844-Say-CISA contact@cisa.dhs.gov CISA.gov Official website of the U.S. Department of Homeland Security About CISA Budget and Performance DHS.gov FOIA Requests Whistleblower Protection Policy (No FEAR Act) Office of Inspector General Privacy Policy Subscribe White House USA.gov Website Feedback Social Media Facebook X LinkedIn YouTube RSS Legal Notices and Terms of Use This product is subject to these notices and the privacy and use policy. Tags Sector: Transportation Systems Sector Topic: Industrial Control System Vulnerabilities, Industrial Control Systems Feedback

Goal Reached Thanks to every supporter — we hit 100%!

Danelec MacGregor VDR G4e Default Credentials and Hardcoded CVEs (ICS Alert)

More from this source