VULNERABILITY INTELLIGENCE

CVE-2026-40425

CVSS score5.7 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2026-05-29
Last modified2026-07-20
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L

Description

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-552

Primary references