Vulnerability · Published Jun 15, 2026 · Assigned by SEC-VLab
CVE-2026-34021Lack of cryptographic protection in Wertheim SafeController 5400 enables RS-485 message sniffing and replay
High 8.6
In plain English
A high-severity security flaw in Wertheim SafeController 5400 Hardware for VAULT ROOMS (Safe Deposit Locker System - Microcontroller) from Wertheim GmbH. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Official description
The Wertheim SafeController 5400, Controller 5400 - AssemblyVersion 6.11.8130.22320, uses RS-485 communication between the server and the microcontroller without cryptographic protection. An attacker with access to the communication path between the server and the microcontroller can sniff RS-485 messages and replay previously observed messages. This can be used, for example, to spoof a "quit alarm" message and continuously deactivate the safe alarm.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Wertheim GmbH | Wertheim SafeController 5400 Hardware for VAULT ROOMS (Safe Deposit Locker System - Microcontroller) | Wertheim SafeController 5400, Controller 5400 - AssemblyVersion 6.11.8130.22320 |
Weakness: CWE-294 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N