The vulnerability in Wertheim SafeController Software (AssemblyVersion 6.15.8328.28014) involves the presence of a hard-coded cryptographic key embedded in the SafeSystem.Infrastructure.Security.dll. An attacker who can access the application files can reverse engineer the DLL to retrieve this key. The extracted key enables decryption of the licence.whs file, exposing sensitive licensing data and a secondary cryptographic key that can decrypt other configuration files. This exposure could compromise the confidentiality of licensing and configuration information within the Safe Deposit Locker System.

The use of a hard-coded cryptographic key allows an attacker with local access to the application files to recover sensitive cryptographic material. This can lead to unauthorized decryption of licensing information and other protected configuration files, potentially undermining the security and integrity of the Safe Deposit Locker System's licensing and configuration management.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to application files to trusted personnel only to prevent reverse engineering. Monitor vendor communications for updates regarding patches or mitigations addressing this vulnerability.