Veille CVE
CVE-2026-40425
4.9 MoyenneDescription
The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 4.0 | 6.9 Moyenne | ics-cert@hq.dhs.gov | CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| 3.1 | 5.7 Moyenne | ics-cert@hq.dhs.gov | CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L |
| 3.1 | 4.9 Moyenne | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N |
Faiblesses (CWE)
Références
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-01.json Issue Tracking
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-01 Third Party AdvisoryUS Government Resource
- https://www.danelec.com/contact Product