A high‑severity flaw in Genetec Security Center main server installations permits an attacker who already has local OS privileges to retrieve Server Admin credentials. The weakness is tied to specific installation package builds rather than the product version number alone, and it effectively exposes privileged credentials that can be used to compromise the entire system. The vulnerability is classified as CWE‑532, indicating an issue with improper handling of sensitive information in the installation payload.

Genetec Security Center main server installations, specifically versions 5.10.4.0, 5.11.3.0, 5.12.2.0, and 5.13.3.0. These releases contained both vulnerable and remediated installation packages under the same version identifier, so a purely version‑based check is insufficient to determine exposure.

The CVSS score of 7.8 indicates a moderate‑to‑high exploitation potential. The EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog, with no evidence of active exploitation. Because the attack requires local OS privileges, the threat is confined to environments where an attacker can gain such access, but once achieved, the attacker can obtain powerful credentials, potentially leading to full system compromise.