CVE-2026-34022 PUBLISHED

Weak custom cryptography and hard-coded keys in Wertheim SafeController 65000 allow traffic decryption

Assigner: SEC-VLab
Reserved: 25.03.2026 Published: 15.06.2026 Updated: 15.06.2026

The Wertheim SafeController Family 65000, Controller 65000 - AssemblyVersion 6.11.8130.22319, uses weak custom cryptographic algorithms with hard-coded cryptographic keys to protect communication. An attacker in an adversary-in-the-middle position can decrypt the data traffic. During reassessment, it was possible to break the encryption/decryption routine and decrypt messages without knowledge of the encryption key. It was also possible to gain knowledge about the encryption key by intercepting enough messages.

Metrics

CVSS Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CVSS Score: 7.1

Product Status

Vendor Wertheim GmbH
Product Wertheim SafeController Family 65000 Hardware for VAULT ROOMS (Safe Deposit Locker System - Microcontroller)
Versions Default: unknown
  • Version Wertheim SafeController Family 65000, Controller 65000 - AssemblyVersion 6.11.8130.22319 is affected

Workarounds

Physically isolate all SafeController devices so that only authorized personnel can access them. Harden all connected systems that communicate with the controller, disable unnecessary services, and restrict access to authorized personnel only. Ensure that servers communicating with SafeController devices use strong, unique authentication credentials and are not accessible to unauthorized users. Maintain physical security of all interconnected components to prevent unauthorized access or tampering.

Solutions

No fix is available for this issue. The vendor stated that the encryption algorithm for Controller 65000 cannot be improved or fixed because of missing hardware support. Affected parties should assess the business risk and switch to a supported version if unsupported products are in use.

Credits

  • Gorazd Jank, SEC Consult Vulnerability Lab finder
  • Christian Hager, SEC Consult Vulnerability Lab finder
  • Philipp Espernberger, SEC Consult Vulnerability Lab finder

References

Problem Types

  • CWE-321 Use of hard-coded cryptographic key CWE

Impacts

  • CAPEC-97 Cryptanalysis