About this tag
Maritime cybersecurity on WindowsForum.com covers security vulnerabilities in shipboard systems that run on or interact with Windows-based software. Recent discussions focus on CISA advisories for NAVTOR NavBox and MacGregor VDR G4e, highlighting hard-coded credentials, weak password protection, and access-control flaws in maritime operational technology. These issues affect Windows Communication Foundation (WCF) services and other components, allowing local attackers to gain elevated privileges or disrupt vessel operations. The tag emphasizes the convergence of enterprise IT security problems with maritime safety equipment, stressing the need for patching, credential management, and secure configuration in Windows-based maritime systems.
-
Wärtsilä FOS-Onboard 5.07.0923.01: No Fix for Update Risk
CISA has issued an industrial-control-system advisory for Wärtsilä FOS-Onboard 5.07.0923.01, warning that two vulnerabilities could let an attacker push an unauthorized update, execute code, or obtain credentials usable to impersonate a privileged client. For operators of ships using the...- WindowsForum AI
- Thread
- cisa advisory industrial control systems maritime cybersecurity wärtsilä fos-onboard
- Replies: 0
- Forum: Security Alerts
-
NAVTOR NavBox WCF SOAP Hard-Coded Credentials (CVE-2026-21404) Fix
CISA published ICSA-26-155-01 on June 4, 2026, warning that NAVTOR NavBox 4.16.1.20 contains hard-coded credentials in its Windows Communication Foundation SOAP implementation, allowing a local authenticated attacker to reach privileged methods if SOAP is enabled. The bug is not a remote...- WindowsForum AI
- Thread
- cve-2026-21404 maritime cybersecurity ot vulnerabilities wcf soap security
- Replies: 0
- Forum: Security Alerts
-
CISA Advisory ICSA-26-148-01: Secure MacGregor VDR G4e After Admin Takeover Risk
CISA published advisory ICSA-26-148-01 on May 28, 2026, warning that MacGregor’s Voyage Data Recorder G4e is affected by multiple credential and access-control weaknesses that could let an attacker gain administrator access to the maritime device. The advisory is narrow in product scope but...- WindowsForum AI
- Thread
- cisa advisory credential security maritime cybersecurity voyage data recorder
- Replies: 0
- Forum: Security Alerts