CVE-2024-34329

HIGH

Entrust Datacard XPS Card Printer Driver <8.5 - RCE

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-34329. PoCs published by pamoutaf.

AI-analyzed exploit summary The exploit leverages insecure file permissions in Datacard XPS Card Printer Driver to achieve local privilege escalation by planting a malicious DLL (DEVOBJ.dll or CFGMGR32.dll) in a writable directory, which is executed with SYSTEM privileges during service startup.

Description

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload.

Exploits (1)

nomisec WORKING POC

by pamoutaf · poc

https://github.com/pamoutaf/CVE-2024-34329

View Code ZIP pw:eip

The exploit leverages insecure file permissions in Datacard XPS Card Printer Driver to achieve local privilege escalation by planting a malicious DLL (DEVOBJ.dll or CFGMGR32.dll) in a writable directory, which is executed with SYSTEM privileges during service startup.

Classification

Working Poc 90%

Attack Type

Lpe

Complexity

Trivial

Reliability

Reliable

Target: Datacard XPS Card Printer Driver <= 8.4

Auth required

Prerequisites: Low-privileged user access · Ability to write to C:\ProgramData\Datacard\XPS Card Printer\Service · Administrator to install the driver

MITRE ATT&CK

T1574.001 - DLL T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 18, 2026 Full analysis →