The vulnerability exists in a hard‑coded cryptographic key embedded in the SafeSystem.Infrastructure.Security.dll component of Wertheim SafeController Software. An attacker who can access the application files can reverse engineer the DLL, recover the key, and use it to decrypt licence.whs and other sensitive configuration files, thereby exposing confidential licensing information and system secrets.

Vendors and products affected include Wertheim GmbH’s SafeController Software for VAULT ROOMS, a safe deposit locker system, specifically AssemblyVersion 6.15.8328.28014.

The CVSS score of 6.8 indicates a moderate severity, and the vulnerability is not listed in the CISA KEV catalog. EPSS is not available, but the attack vector is inferred to be local file access: an attacker must obtain the application directory or a copy of the DLL to extract the key. Once the key is recovered, the attacker can decrypt licensing data and potentially other configuration files, leading to significant confidentiality loss.