CVE-2025-58744 - Hard-Coded Default Credentials Enable Document Archive Decryption in Milner ImageDirector Capture

Back Back to CVE browser

MEDIUM

Hard-Coded Default Credentials Enable Document Archive Decryption in Milner ImageDirector Capture

Published Jan 20, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.14%

Description

Use of Default Credentials, Hard-coded Credentials vulnerability in C2SGlobalSettings.dll in

Milner ImageDirector Capture on Windows allows decryption of document archive files using credentials decrypted with hard-coded application encryption key.

This issue affects ImageDirector Capture: from 7.0.9.0 before 7.6.3.25808.

Affected products

Vendor Milner Product ImageDirector Capture Default
unaffected
Affected
- ≥ 7.0.9.0, < 7.6.3.25808

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Milner	ImageDirector Capture	unaffected	Affected ≥ 7.0.9.0, < 7.6.3.25808

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-1392

CWE-798

Hard-coded Credentials

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-206307
Advisory
https://sra.io/advisories
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-206307		Advisory
https://sra.io/advisories		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner SRA

Published Jan 20, 2026

Updated Jan 21, 2026

Reserved Sep 4, 2025

Link CVE-2025-58744

CISA Vulnrichment

Updated Jan 21, 2026

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-58744

Red Hat

No data

ENISA EUVD

Assigner SRA

Published Jan 20, 2026

Updated Jan 21, 2026

Link EUVD-2025-206307

GitHub

No data