CVE-2024-34329

Deeper analysis

CVE-2024-34329 is an insecure permissions vulnerability in the Entrust Datacard XPS Card Printer Driver version 8.5 and earlier when the dxp1-patch-E24-004 update has not been applied. The flaw, assigned CWE-277, permits local placement of a crafted DLL that results in arbitrary code execution with SYSTEM privileges. It carries a CVSS 3.1 score of 8.4 reflecting local attack vector, low complexity, no required privileges or user interaction, and full confidentiality, integrity, and availability impact.

An unauthenticated local attacker can exploit the weakness by supplying a malicious DLL payload in a location writable by unprivileged users; successful loading by the driver then yields code execution under the SYSTEM account, enabling full control over the affected system.

Entrust security bulletin E24-004 and associated driver downloads direct customers to apply the dxp1-patch-E24-004 update, after which the insecure permissions are corrected. The vendor also provides updated driver packages through its support portal for Instant ID card issuance systems.

EPSS for the CVE reached a peak of 0.1012 on 2025-12-11 before receding to the current value of 0.0798, indicating a modest post-disclosure increase in exploitation interest. Public proof-of-concept material is available on GitHub.