Advisories · Technology
Wertheim GmbH Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System).
Every CVE that names Wertheim GmbH Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Improper branch-code validation in Wertheim SafeController Software allows file path manipulation
- Wertheim GmbH Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)
- Path traversal
- CVSS 6.8 Medium
Hard-coded cryptographic key in Wertheim SafeController Software allows decryption of sensitive configuration data
- Wertheim GmbH Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)
- Hard-coded credentials
- CVSS 6.9 Medium
Unauthenticated direct access to web data in Wertheim SafeController Software exposes files
- Wertheim GmbH Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)
- Broken access control
- CVSS 5.3 Medium
Upload restriction bypass in Wertheim SafeController Software allows authenticated users to upload arbitrary files
- Wertheim GmbH Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)
- Unrestricted file upload
- CVSS 7.1 High
Path traversal in Wertheim SafeController Software allows authenticated users to download arbitrary files
- Wertheim GmbH Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)
- Path traversal
- CVSS 5.3 Medium
IP restriction bypass in Wertheim SafeController Software allows logins from unauthorized network locations
- Wertheim GmbH Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)
- Authentication bypass
- CVSS 8.6 High
Missing authorization checks in Wertheim SafeController Software allow low-privileged users to access restricted functions
- Wertheim GmbH Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)
- Broken access control
- CVSS 7.1 High
Broken WebSocket authorization in Wertheim SafeController Software allows cross-branch access to restricted functions
- Wertheim GmbH Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)
- Broken access control