PT-2026-3667 · Milner · Imagedirector Capture

Asa Reynolds + 1 · Published 2026-01-20 · Updated 2026-02-10 · CVE-2025-58742

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Milner ImageDirector Capture versions 7.0.9 through 7.6.3.25808

Description A security issue exists in the Connection Settings dialog of Milner ImageDirector Capture that allows an Adversary in the Middle (AiTM) attack. This occurs because the 'Server' field can be modified, redirecting client authentication. The vulnerability involves insufficiently protected credentials and improper restriction of the communication channel to intended endpoints.

Recommendations Update Milner ImageDirector Capture to version 7.6.3.25808 or later.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

CWE-923

Related Identifiers

CVE-2025-58742

Affected Products

Imagedirector Capture

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-58742 · Security Note
• https://osv.dev/vulnerability/CVE-2025-58742 · Vendor Advisory
• https://sra.io/advisories · Note
• https://t.me/cveNotify/151579 · Telegram Post
• https://twitter.com/CVEnew/status/2013729183307047168 · Twitter Post