CVE-2024-34329

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.4 and earlier allows...

8.4 HighPublic exploit

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.59%Up 0.5 points since Jul 23, 2024

What each source reports

CVE List Score used 8.4

Record: CVE-2024-34329
CVSS 3.1: 8.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-277
Updated: 2026-11-02

EUVDEUVD-2024-34725 8.4

Record: EUVD-2024-34725
CVSS 3.1: 8.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-vxx5-p9c9-297v 8.4

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.4 and earlier allows...

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.4 and earlier allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload.

Record: GHSA-vxx5-p9c9-297v
CVSS 3.1: 8.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-277, CWE-378
Updated: 2026-11-02

NVD 8.4

Record: CVE-2024-34329
CVSS 3.1: 8.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-277
Updated: 2026-11-02

Affected products

entrust datacard xps card printer driver

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	pamoutaf/CVE-2024-34329	2024-07-22

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-34329 is a high vulnerability (CVSS 8.4) in Entrust Datacard Xps Card Printer Driver, published July 22, 2024. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.59%, the 48th percentile. No source names a fixed version.