Wertheim vulnerabilities
We track 5 vulnerabilities in Wertheim products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on June 15, 2026.
Latest Wertheim vulnerabilities
- 7.1 High severity
Wertheim SafeController Software for VAULT…: Relative Path Traversal
Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a path traversal vulnerability in the documentName parameter of the /safe/selfservice/openselfservicedocument endpoint. The application constructs a file path using attacker-controlled
- 8.6 High severity
Wertheim SafeController Software for VAULT…: Missing Authorization
The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains missing authorization checks on multiple web application endpoints. An authenticated attacker with minimal privileges can access endpoints that are not visible in the frontend but
- 7.1 High severity
Wertheim SafeController Software for VAULT…: Incorrect Authorization
The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an incorrect authorization vulnerability in the WebSocket communication used by the SafeController WebMessageBroker. An authenticated attacker with valid low-privileged branch user
- 7.1 High severity
Wertheim SafeController Family 65000 Hardware…: Use of Hard-coded Cryptographic Key
The Wertheim SafeController Family 65000, Controller 65000 - AssemblyVersion 6.11.8130.22319, uses weak custom cryptographic algorithms with hard-coded cryptographic keys to protect communication. An attacker in an adversary-in-the-middle position can decrypt
- 8.6 High severity
Wertheim SafeController 5400 Hardware for…: Authentication Bypass by Capture-replay
The Wertheim SafeController 5400, Controller 5400 - AssemblyVersion 6.11.8130.22320, uses RS-485 communication between the server and the microcontroller without cryptographic protection. An attacker with access to the communication path between the server and