PT-2026-3668 · Milner · Milner Imagedirector Capture

Asa Reynolds + 1 · Published 2026-01-20 · Updated 2026-02-10 · CVE-2025-58743

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Milner ImageDirector Capture versions 7.0.9.0 through 7.6.3.25808

Description The software contains a flaw due to the use of a broken cryptographic algorithm (DES). This impacts the Password class within the C2SConnections.dll component on Windows systems. The issue allows for encryption brute forcing, potentially leading to the compromise of database credentials.

Recommendations Update Milner ImageDirector Capture to a version later than 7.6.3.25808.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2025-58743

Affected Products

Milner Imagedirector Capture

References · 5

• https://osv.dev/vulnerability/CVE-2025-58743 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58743 · Security Note
• https://t.me/cveNotify/151580 · Telegram Post
• https://twitter.com/CVEnew/status/2013731476731273581 · Twitter Post
• https://sra.io/advisories · Note