CVE-2025-58743CWE-327

Insecure Encryption Algorithms Enable Brute-Force Database Credential Access in Milner ImageDirector Capture

High · published January 20, 2026

CVSS v4.0
7.2
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

🚨 A broken cryptographic algorithm is leaving your database credentials vulnerable to brute force attacks! 🔒 Think of this as using a rusty old lock on your front door — it might keep out the occasional squirrel, but a determined intruder can pop it open with little effort. 💼 In this case, the outdated DES encryption is like that old lock: easy for attackers to exploit, allowing them to access sensitive data. An attacker could systematically brute-force their way through your database credentials, potentially gaining access to sensitive information and wreaking havoc on your systems. If they succeed, they could manipulate, steal, or even delete crucial data, leading to serious consequences for your operations.

Put simply

Think of this as using a rusty old lock on your front door — it might keep out the occasional squirrel, but a determined intruder can pop it open with little effort. 💼 In this case, the outdated DES encryption is like that old lock: easy for attackers to exploit, allowing them to access sensitive data. The vulnerability lies in the use of the outdated DES cryptographic algorithm within the Password class of C2SConnections.dll in Milner ImageDirector Capture. This allows attackers to perform brute force attacks to retrieve database credentials on versions from 7.0.9.0 before 7.6.3.25808.

What to do

An attacker could systematically brute-force their way through your database credentials, potentially gaining access to sensitive information and wreaking havoc on your systems. If they succeed, they could manipulate, steal, or even delete crucial data, leading to serious consequences for your operations. To secure your systems, upgrade to version 7.6.3.25808 or later immediately to eliminate the use of DES encryption. Additionally, consider implementing stronger encryption algorithms such as AES to further bolster security against brute-force attacks. You've got this! Follow these steps, and you'll have your defenses reinforced in no time. 🛡️

The record
Technical detail
CVSS v4.0
7.2 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:H/SI:H/SA:H
EPSS
0.00081 · 0.2th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2026-01-20T21:37Z
EPSS history
Timeline
  • 20 JAN 21:37Z
    Insecure Encryption Algorithms Enable Brute-Force Database Credential Access in Milner ImageDirector Capture
    cvelistv5