CVE-2026-34021

Name of the Vulnerable Software and Affected Versions Wertheim SafeController 5400 version 6.11.8130.22320

Description The device uses RS-485 communication between the server and the microcontroller without cryptographic protection. An attacker with access to the communication path can sniff RS-485 messages and replay previously observed messages. This allows for the spoofing of messages, such as a "quit alarm" message, to continuously deactivate the safe alarm.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.