The Wertheim SafeController Family 65000 uses a custom cryptographic algorithm with hard‑coded keys that protects controller communication. The weakness allows an attacker positioned between the controller and its communication interface to break the encryption and decrypt data streams. Interception of sufficient messages can also reveal key material, meaning the confidentiality of all traffic to and from the safe controller is compromised.

Vulnerable devices are Wertheim GmbH’s SafeController Family 65000 hardware, specifically the Controller 65000 model with AssemblyVersion 6.11.8130.22319. These controllers are installed in vault rooms where safe deposit lockers communicate through a microcontroller.

The CVSS score of 7.1 reflects high severity, but the EPSS score is not available, indicating limited publicly known exploitation data. The vulnerability is not listed in the CISA KEV catalog. Exploitation would likely occur via an adversary‑in‑the‑middle position, where the attacker can access encrypted traffic. Because the vendor has stated the encryption cannot be improved due to hardware limitations and no patch is available, the risk remains unless mitigated operationally or by migrating to a supported system.