Insecure Remoting Exposure in Entrust Instant Financial Issuance Software

CVE-2025-34414

What is CVE-2025-34414?

Entrust Instant Financial Issuance (IFI) software prior to versions 6.10.5 and 6.11.1 contains an insecure .NET Remoting exposure in its Legacy Remoting Service, which is enabled by default. This vulnerability allows a remote, unauthenticated attacker to exploit the exposed remoting objects accessible through a registered TCP remoting channel. By leveraging SOAP and binary formatters, the attacker can read arbitrary files from the server, manipulate outbound authentication, and potentially achieve arbitrary file write and remote code execution using established .NET Remoting exploitation techniques. Consequently, this could lead to the disclosure of sensitive information, including installation credentials and service account data, jeopardizing the security of the affected host.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References