Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-34021 Details

UNDERGOING ENRICHMENT

The CVE is currently being enriched by the Volerion team. The enrichment process results in the association of reference link tags, CVSS, and CPE applicability statement data.

Description

The Wertheim SafeController 5400, Controller 5400 - AssemblyVersion 6.11.8130.22320, uses RS-485 communication between the server and the microcontroller without cryptographic protection. An attacker with access to the communication path between the server and the microcontroller can sniff RS-485 messages and replay previously observed messages. This can be used, for example, to spoof a "quit alarm" message and continuously deactivate the safe alarm.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:…Vector:This vulnerability is currently being analyzed.

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-wertheim-safecontroller-hardware-for-vault-rooms-safe-deposit-locker-system-microcontroller/	CISA-ADP
https://r.sec-consult.com/wertdev	SEC Consult Vulnerability Lab
https://wertheim-safes.com/safe-deposit-boxes/	SEC Consult Vulnerability Lab

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-294	Authentication Bypass by Capture-replay	SEC Consult Vulnerability Lab

Affected Products

This vulnerability is currently being analyzed

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	SEC Consult Vulnerability Lab
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 15, 2026	CVE Modified	CISA-ADP
Jun 15, 2026	New CVE Received	SEC Consult Vulnerability Lab