Danelec MacGregor Voyage Data Recorder Default Accounts with Hard-Coded Credentials Vulnerability

A vulnerability exists in the Danelec MacGregor Voyage Data Recorder (VDR) G4e devices running versions prior to V5.250, due to the presence of default accounts that utilize hard-coded credentials. This issue allows for unauthorized access to the device, potentially leading to further exploitation.

Impact

Exploitation of this vulnerability could grant an attacker administrator access to the affected device.

Remediation

Danelec has released firmware version V5.250 to address this vulnerability. Users of MacGregor Voyage Data Recorder (VDR) G4e devices are advised to update the firmware at their earliest service opportunity, rather than waiting for the annual performance test. For additional questions, contact Danelec through their website.