CVE-2026-40425

6.9 mediumEPSS 0.4%

Medium (6.9) in macgregor interschalt vdr g4e firmware. EPSS 0.4% chance of exploitation in the next 30 days.

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password.

Severity

CVSS 4.0

6.9 medium

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

4.9 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWE: CWE-552
Published: 2026-05-29
Modified: 2026-07-20
Record from: the NVD, synced 2026-10-19

Affected

macgregor:interschalt_vdr_g4e_firmware

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-01.json
https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-01
https://www.danelec.com/contact

Check your stack JSON