CVE-2024-34329

Published: Jul 22, 2024

Modified: Mar 14, 2025

PUBLISHED

Description

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.entrust.com/ja/contact/services/downloads/drivers

https://github.com/pamoutaf/CVE-2024-34329/blob/main/README.md

https://www.entrust.com/support/instant-id-card-issuance-systems/ds3-direct-to-card-printer-support

https://www.entrust.com/sites/default/files/documentation/productsupport/entrust-security-bulletin-e24-004.pdf

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-34329

Description

Affected Products

References