VULNERABILITY INTELLIGENCE

CVE-2025-58742

CVSS score5.9 MEDIUM
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-01-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

Insufficiently Protected Credentials, Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Connection Settings dialog in Milner ImageDirector Capture on Windows allows Adversary in the Middle (AiTM) by modifying the 'Server' field to redirect client authentication.This issue affects ImageDirector Capture: from 7.0.9 before 7.6.3.25808.

Weakness classification

  • 57dba5dd-1a03-47f6-8b36-e84e47d335d8: CWE-522
  • nvd@nist.gov: CWE-522

Primary references