CVE-2025-58743 HIGH

CVE-2025-58743: Insecure Encryption Algorithms Enable Brute-Force Database Credential Access in Milner ImageDirector Capture

Vendor Milner
Product ImageDirector Capture
Weakness CWE-327 · Broken crypto
Published January 20, 2026
Last update January 21, 2026
View on NVD All CVEs

CVSS base score

7.2/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:H/SI:H/SA:H

What the vulnerability does

01Description

Use of a Broken or Risky Cryptographic Algorithm (DES) vulnerability in the Password class in C2SConnections.dll in Milner ImageDirector Capture on Windows allows Encryption Brute Forcing to obtain database credentials.This issue affects ImageDirector Capture: from 7.0.9.0 before 7.6.3.25808.

Key dates

02Disclosure timeline

January 20, 2026 CVE published
January 21, 2026 Record updated