Home

Description

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction bypass vulnerability in the login process. The application restricts user logins based on the IP address associated with a branch location, but the client IP address is derived from the HTTP X-Forwarded-For header when that header is present. An attacker with valid branch user credentials can manipulate the X-Forwarded-For header during login to spoof the expected branch IP address and obtain a valid authenticated session from an unauthorized network location.

PUBLISHED Reserved 2026-03-25 | Published 2026-06-15 | Updated 2026-06-15 | Assigner SEC-VLab




MEDIUM: 5.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-290 Authentication bypass by spoofing

Product status

Default status
unknown

Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014
affected

Credits

Christian Hager, SEC Consult Vulnerability Lab finder

Gorazd Jank, SEC Consult Vulnerability Lab finder

Philipp Espernberger, SEC Consult Vulnerability Lab finder

References

wertheim-safes.com/safe-deposit-box-management/ product

r.sec-consult.com/wertheim third-party-advisory

cve.org (CVE-2026-34025)

nvd.nist.gov (CVE-2026-34025)

Download JSON