Milner ImageDirector Capture DES Cryptography Vulnerability Allowing Database Credential Brute Forcing

A vulnerability exists in the Password class of C2SConnections.dll within Milner ImageDirector Capture, specifically in versions from 7.0.9.0 prior to 7.6.3.25808. This vulnerability arises from the use of the Data Encryption Standard (DES), a broken and risky cryptographic algorithm, which allows for brute-forcing of encrypted database credentials. Exploiting this vulnerability could lead to unauthorized access to sensitive database information.

Impact

Successful exploitation of this vulnerability allows for brute-forcing of encrypted database credentials, potentially leading to unauthorized access to the database.