CVE-2025-34414 is a critical vulnerability in Entrust Instant Financial Issuance (IFI) On Premise software versions 5.x prior to 6.10.5 and 6.11.1. The vulnerability arises from an insecure .NET Remoting exposure in the Legacy Remoting Service, which is enabled by default and registers a TCP remoting channel with SOAP and binary formatters at TypeFilterLevel=Full. This configuration exposes default ObjectURI endpoints such as logfile.rem, photo.rem, cwPhoto.rem, and reports.rem on a network-accessible port. A remote unauthenticated attacker can exploit this to read arbitrary files, coerce outbound authentication, and potentially achieve arbitrary file writes and remote code execution using known .NET Remoting exploitation techniques. This leads to disclosure of sensitive installation and service-account data and full compromise of the affected host.

The vulnerability allows unauthenticated remote attackers to execute arbitrary code and read or write arbitrary files on the affected system. This can result in complete compromise of the host, including disclosure of sensitive installation and service-account credentials. The CVSS 4.0 score is 9.3 (critical), reflecting the high impact and ease of exploitation over the network without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links or official fixes are provided in the available data, users should verify with Entrust Corporation for updates or patches addressing this vulnerability. Until a patch is available, consider disabling the Legacy Remoting Service or restricting network access to the remoting port to trusted hosts only to mitigate exposure.