Wertheim SafeController Family 65000 Hardware for VAULT ROOMS Encryption Key hard-coded key

Summaryinfo

A vulnerability was found in Wertheim SafeController Family 65000 Hardware for VAULT ROOMS 6.11.8130.22319. It has been rated as problematic. Impacted is an unknown function of the component Encryption Key Handler. Performing a manipulation results in hard-coded key. This vulnerability is identified as CVE-2026-34022. The attack can only be performed from the local network. There is not any exploit available.

Detailsinfo

A vulnerability classified as problematic has been found in Wertheim SafeController Family 65000 Hardware for VAULT ROOMS 6.11.8130.22319. This affects an unknown function of the component Encryption Key Handler. The manipulation with an unknown input leads to a hard-coded key vulnerability. CWE is classifying the issue as CWE-321. The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered. This is going to have an impact on confidentiality. The summary by CVE is:

The Wertheim SafeController Family 65000, Controller 65000 - AssemblyVersion 6.11.8130.22319, uses weak custom cryptographic algorithms with hard-coded cryptographic keys to protect communication. An attacker in an adversary-in-the-middle position can decrypt the data traffic. During reassessment, it was possible to break the encryption/decryption routine and decrypt messages without knowledge of the encryption key. It was also possible to gain knowledge about the encryption key by intercepting enough messages.

The weakness was released by Gorazd Jank. The advisory is shared at wertheim-safes.com. This vulnerability is uniquely identified as CVE-2026-34022 since 03/25/2026. The exploitability is told to be easy. The attack needs to approached within the local network. No form of authentication is needed for exploitation. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1600.001 for this issue.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Wertheim

Name

• SafeController Family 65000 Hardware for VAULT ROOMS

Version

• 6.11.8130.22319

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion