Milner ImageDirector Capture Hard-Coded Encryption Key Vulnerability Allowing Database Credential Decryption
Vulnerability
A vulnerability exists in Milner ImageDirector Capture versions 7.0.9 prior to 7.6.3.25808, due to a hard-coded encryption key used in the Password function within C2SGlobalSettings.dll. This flaw enables local attackers to decrypt database credentials by extracting the cryptographic key from the executable.
Impact
Exploitation of this vulnerability allows local attackers to access decrypted database credentials, potentially leading to unauthorized data access or manipulation.
Added: Jan 20, 2026, 11:41 PM
Updated: Jan 20, 2026, 11:41 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
3.3remediation
0.0relevance
2.2threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.