CVE-2024-34329

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload...

CVE-2024-34329: Insecure Inherited Permissions

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload...

CVE-2024-34329

The Entrust Datacard XPS Card Printer Driver (versions 8.5 and earlier, or 8.4 and earlier) is vulnerable to a Local Privilege Escalation (LPE) due to insecure file and folder permissions. Specifically, the directory C:\ProgramData\Datacard\XPS Card Printer\Service grants full control to all user...