Successful exploitation of these vulnerabilities could result in an attacker gaining administrator access to the device.
The following versions of MacGregor Voyage Data Recorder (VDR) G4e are affected:
MacGregor Voyage Data Recorder (VDR) G4e
Vendor
Equipment
Danelec
MacGregor Voyage Data Recorder (VDR) G4e
Use of Default Credentials, Insufficiently Protected Credentials, Use of Password Hash With Insufficient Computational Effort, Use of Hard-coded Credentials, Files or Directories Accessible to External Parties
Critical Infrastructure Sectors: Transportation Systems
Countries/Areas Deployed: Worldwide
Company Headquarters Location: Denmark
The VDR device includes a default username and password, with no enforced password change.