Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-34029

Hard-coded cryptographic key in Wertheim SafeController Software allows decryption of sensitive configuration data

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SEC-VLab

Description

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a hard-coded cryptographic key in the SafeSystem.Infrastructure.Security.dll component. An attacker with access to the application files can reverse engineer the DLL and recover the hard-coded cryptographic key. This key can be used to decrypt the licence.whs file, which contains sensitive information about the licensing party and a second key that can be used to decrypt other configuration files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Wertheim GmbH Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)

Default version status: unknown

  • Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014affected

References