Cyber Resilience

CVE-2026-40425

Macgregor Interschalt Vdr G4E Firmware ≤ 5.250

Published
29 May 2026
Modified
20 July 2026
Patch / advisory
CVSS Score v4 6.9
Click a component to see what it means
Raw vectorCVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0038 30th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2026-40425 is a medium-severity Files or Directories Accessible to External Parties (CWE-552) vulnerability in Macgregor Interschalt Vdr G4E Firmware. Its CVSS base score is 6.9 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Account Manipulation (T1098); ranked at the 30th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to AC-3 (Access Enforcement) and AC-6 (Least Privilege) — see the control section below for these in your framework.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability Data

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1098 Account Manipulation Persistence
Adversaries may manipulate accounts to maintain and/or elevate access to victim systems.
T1552.001 Credentials In Files Credential Access
Adversaries may search local file systems and remote file shares for files containing insecurely stored credentials.
Why these techniques?

Vuln allows web admin to directly modify auth credential files, enabling password changes (account manipulation) and exposing unsecured creds in files.

Confidence: MEDIUM · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2026-42951Same product: Macgregor Interschalt Vdr G4E
CVE-2026-44611Same product: Macgregor Interschalt Vdr G4E
CVE-2026-42941Same product: Macgregor Interschalt Vdr G4E
CVE-2026-42929Same product: Macgregor Interschalt Vdr G4E
CVE-2025-41240Shared CWE-552
CVE-2018-25164Shared CWE-552
CVE-2023-6375Shared CWE-552
CVE-2024-43660Shared CWE-552
CVE-2024-24161Shared CWE-552
CVE-2026-11841Shared CWE-552

Affected Assets

macgregor
interschalt vdr g4e firmware
≤ 5.250

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • AC-3 Access Enforcement
  • AC-6 Least Privilege
  • CM-5 Access Restrictions for Change
Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)
  • 5 hardening rules · 2 OS baselines
Validate
Prove the fix (OWASP ASVS)
  • V8.4.2

Mitigating Controls (NIST 800-53 r5) AI

prevent

Enforces access control policy so that even the administrator account cannot arbitrarily read or modify authentication files such as those storing the root password.

prevent

Restricts the administrator account to only the privileges required for its role, eliminating the ability to directly edit sensitive authentication files.

prevent

Imposes explicit access restrictions on who may change configuration files or system authenticators, directly blocking the web-interface file-editing path described in the CVE.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.AA-05 mostly match
prevents

Enforcing least-privilege permissions and authorization policies directly prevents unauthorized file/directory exposure.

PR.IR-01 mostly match
prevents

Logical segmentation and access protections stop external parties from reaching files that should remain internal.

PR.DS-01 partial match
prevents

Data-at-rest protections such as encryption or ACLs reduce the impact of unintended file exposure.

PR.PS-01 partial match
prevents

Hardened configuration baselines commonly include file-system permission settings that limit external access.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

mitigates

By tracing and retrieving all copies of information stored on endpoint and portable devices, the control reduces the likelihood that files remain accessible outside the organization’s security perimeter.

mitigates

Labeling information according to its sensitivity and specifying corresponding protection measures makes it less probable that files or directories containing sensitive content will be left accessible to external parties.

mitigates

Including asset location and ownership in the inventory, combined with secure disposal procedures, decreases the chance that files or directories remain accessible to external parties after they should have been removed or restricted.

mitigates

Solid perimeters and locked external access points stop files, devices, or directories containing sensitive data from being reachable by external parties who could otherwise walk in or break in.

mitigates

Authorizing and logging the removal of storage media, disabling unused ports, and monitoring transfers limit the exposure of files or directories to external parties outside the organization’s controlled environment.

mitigates

Segregating delivery/loading zones and controlling external doors prevents external parties from reaching directories or resources that should remain inaccessible.

References