Executive Summary

This vulnerability involves the use of a hard-coded encryption key within the Password function in the C2SGlobalSettings.dll component of Milner ImageDirector Capture on Windows. Because the encryption key is embedded directly in the executable, a local attacker can extract this key and use it to decrypt database credentials, compromising the security of sensitive information.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability allows a local attacker to decrypt database credentials by extracting the hard-coded cryptographic key from the executable. This can lead to unauthorized access to the database, potentially exposing sensitive data, enabling further attacks, and compromising the integrity and confidentiality of the system.

Useful 0 Not Useful 0