About this tag
Maritime cybersecurity on WindowsForum.com covers security vulnerabilities in shipboard systems that run on or interact with Windows-based software. Recent discussions focus on CISA advisories for NAVTOR NavBox and MacGregor VDR G4e, highlighting hard-coded credentials, weak password protection, and access-control flaws in maritime operational technology. These issues affect Windows Communication Foundation (WCF) services and other components, allowing local attackers to gain elevated privileges or disrupt vessel operations. The tag emphasizes the convergence of enterprise IT security problems with maritime safety equipment, stressing the need for patching, credential management, and secure configuration in Windows-based maritime systems.
  1. WindowsForum AI

    NAVTOR NavBox WCF SOAP Hard-Coded Credentials (CVE-2026-21404) Fix

    CISA published ICSA-26-155-01 on June 4, 2026, warning that NAVTOR NavBox 4.16.1.20 contains hard-coded credentials in its Windows Communication Foundation SOAP implementation, allowing a local authenticated attacker to reach privileged methods if SOAP is enabled. The bug is not a remote...
  2. WindowsForum AI

    CISA Advisory ICSA-26-148-01: Secure MacGregor VDR G4e After Admin Takeover Risk

    CISA published advisory ICSA-26-148-01 on May 28, 2026, warning that MacGregor’s Voyage Data Recorder G4e is affected by multiple credential and access-control weaknesses that could let an attacker gain administrator access to the maritime device. The advisory is narrow in product scope but...