CVE-2025-58744

Use of Default Credentials, Hard-coded Credentials vulnerability in C2SGlobalSettings.dll in Milner ImageDirector Capture on Windows allows decryption of document archive files using credentials decrypted with hard-coded application encryption key. This issue affects ImageDirector Capture: from 7.0.9.0 before 7.6.3.25808.

Score

CVSS 3.1 7.5 High

Status

Analyzed - 57dba5dd-1a03-47f6-8b36-e84e47d335d8

Published

2026-01-20

Last modified

2026-01-21

Weaknesses

CWE-1392, CWE-798

Affected products

• Imagedirector Capture (Milner)

References

• https://sra.io/advisories