Back to overview

CVE-2026-34021

HIGH Exploitation: PoC
8.6
CVSS 4.0
Description
The Wertheim SafeController 5400, Controller 5400 - AssemblyVersion 6.11.8130.22320, uses RS-485 communication between the server and the microcontroller without cryptographic protection. An attacker with access to the communication path between the server and the microcontroller can sniff RS-485 messages and replay previously observed messages. This can be used, for example, to spoof a "quit alarm" message and continuously deactivate the safe alarm.

Metadata

CVE ID
CVE-2026-34021
State
PUBLISHED
Assigner
SEC-VLab
Reserved
2026-03-25 10:46 UTC
Published
2026-06-15 10:02 UTC
Last updated
2026-06-15 13:10 UTC
Primary CWE
CWE-294
CWE-294 Authentication bypass by capture-replay
Vendor / Product
Wertheim GmbH / Wertheim SafeController 5400 Hardware for VAULT ROOMS (Safe Deposit Locker System - Microcontroller)
Sources
cve.org  ·  NVD

Severity & Metrics

8.6 HIGH CVSS 4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
SSVC — CISA Coordinator
Exploitation
PoC
Automatable
no
Tech. Impact
total
Affected products (1)
VendorProductPlatformVersions
Wertheim GmbH Wertheim SafeController 5400 Hardware for VAULT ROOMS (Safe Deposit Locker System - Microcontroller) — Wertheim SafeController 5400, Controller 5400 - AssemblyVersion 6.11.8130.22320
Weakness (CWE)
CWESourceDescription
CWE-294 cna CWE-294 Authentication bypass by capture-replay
CVSS scores (1)
ScoreSeverityVersionSourceVector
8.6 HIGH 4.0 cna CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
References (2)
Back to overview