CVE-2026-44611 identifies a weakness in the password hashing implementation of the Danelec MacGregor Voyage Data Recorder (VDR) G4e. The hashing method restricts password length and does not apply sufficient computational effort, making it susceptible to brute force attacks. The vulnerability requires an attacker to have network access and low privileges but does not require user interaction. The impact is primarily on confidentiality, with limited integrity impact and no availability impact. No vendor-provided patch or remediation information is available, and no known exploits have been reported.

An attacker with network access and low privileges could exploit the weak password hashing to recover passwords through brute force methods. This compromises the confidentiality of stored credentials. The integrity impact is limited, and availability is not affected. There are no known active exploits targeting this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting network access to the device and monitoring for unauthorized access attempts. Avoid relying solely on the device's password protection due to the weak hashing method.