Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-34029 EUVD-2026-36712GHSA-pwhr-98hp-44r7

Hard-coded cryptographic key in Wertheim SafeController Software allows decryption of sensitive configuration data

Published Jun 15, 2026 · Updated Jun 15, 2026 · Assigned by SEC-VLab

Description

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a hard-coded cryptographic key in the SafeSystem.Infrastructure.Security.dll component. An attacker with access to the application files can reverse engineer the DLL and recover the hard-coded cryptographic key. This key can be used to decrypt the licence.whs file, which contains sensitive information about the licensing party and a second key that can be used to decrypt other configuration files.

Affected products

VendorProductAffectedFixed
Wertheim Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System) Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014 —

References