Hard-coded Default Credentials in Danelec MacGregor Voyage Data Recorder

Successful exploitation allows an attacker to authenticate to the affected voyage data recorder using hard-coded default credentials and obtain unauthorized access. Based on the provided scoring and advisory summary, the primary impacts are high confidentiality and high integrity impact, with low availability impact. This could enable unauthorized access to stored or accessible data and unauthorized modification of system state or recorder-related information.

Until a vendor fix is applied, restrict network access to the Voyage Data Recorder to only trusted management networks and authorized hosts, especially because the CVSS vector indicates adjacent-network reachability. Isolate the device from untrusted or shared networks, monitor for authentication attempts using known/default accounts, disable or remove default accounts if the platform permits, and enforce compensating controls such as network segmentation and strict access control lists.

Apply the vendor-provided fix or updated product version referenced by the relevant CISA ICS advisory for CVE-2026-42929 / ICSA-26-148-01 when available from Danelec. Because the issue is the presence of hard-coded default credentials, remediation requires eliminating those credentials from the product or replacing them with unique, changeable credentials under operator control.