The vulnerability exists in the WebSocket communication layer of Wertheim SafeController Software. An authenticated attacker who possesses low‑privileged branch credentials can alter WebSocket messages to reference controller identifiers belonging to other branches. This manipulation permits the attacker to invoke restricted functions, such as activating boxes, and to access resources that are not part of the user’s authorized branch. The weakness is an authorization flaw (CWE‑863) that does not grant code execution but directly undermines confidentiality and integrity of branch‑specific assets.

The affected vendor is Wertheim GmbH and the product is Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System). The documented impacted build is AssemblyVersion 6.15.8328.28014; other releases may also be affected but are not explicitly listed.

The CVSS score of 7.1 indicates a moderate to high risk, although the flaw requires the attacker to be already authenticated with a branch account, limiting initial access. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. A potential attack path involves logging into the web application, connecting to the WebSocket endpoint, and submitting crafted messages that target controllers outside the attacker’s branch. Because the flaw is purely at the authorization layer, exploitation is relatively straightforward once authenticated, highlighting the need for rapid remediation.