Milner ImageDirector Capture Insufficiently Protected Credentials Vulnerability Allowing Adversary in the Middle Attack

A vulnerability in the Connection Settings dialog of Milner ImageDirector Capture on Windows has been identified, allowing for an Adversary in the Middle (AiTM) attack. This issue arises from insufficiently protected credentials and improper restriction of communication channels to intended endpoints. By modifying the 'Server' field, it is possible to redirect client authentication. The vulnerability affects Milner ImageDirector Capture versions from 7.0.9 prior to 7.6.3.25808, with earlier versions potentially also being impacted.

Impact

Exploitation of this vulnerability could lead to unauthorized interception and modification of client authentication, allowing an attacker to impersonate a user or gain unauthorized access to resources.