Entrust Instant Financial Issuance

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 2
    Known Exploited: 0
    0
    Critical Level Threats
    0
    High Level Threats
    1
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-23746

    Entrust Instant Financial Issuance (IFI) SmartCardController Service .NET Remoting RCE

    Last Modified: Apr 16, 2026
    Published: Jan 15, 2026

    CVE-2024-39342

    Entrust Instant Financial Issuance (formerly known as Cardwizard) 6.10.0, 6.9.0, 6.9.1, 6.9.2, and 6.8.x and earlier uses a DLL library (i.e. DCG.Security.dll) with a custom AES encryption process that relies on static hard-coded key values. These keys are not uniquely generated per installation of the software. Combined with the encrypted password that can be obtained from "WebAPI.cfg.xml" in CVE-2024-39341, the decryption is trivial and can lead to privilege escalation on the Windows host.

    Last Modified: Apr 15, 2026
    Published: Sep 23, 2024
    Items Per Page
    Entrust_Instant_Financial_Issuance Vulnerabilities &… | CVE-DB