The Wertheim SafeController Software version AssemblyVersion 6.15.8328.28014 suffers from insufficient validation of branch codes during branch creation. The branch code is used in multiple application functions, including generating filesystem paths for uploaded files, profile pictures, and settings. An authenticated attacker with the settings_branches_manage privilege can inject path traversal sequences into the branch code, influencing the final filesystem path used by file operations. This can lead to files being written outside intended directories, constrained by service account permissions and branch code length limits. No official patch or remediation level has been disclosed, and no known exploits are reported in the wild.

An attacker with authenticated access and the settings_branches_manage privilege can manipulate branch codes to cause files to be stored in arbitrary filesystem locations accessible by the service account. This may lead to unauthorized file writes outside intended directories, potentially affecting system integrity or availability depending on the context and permissions. The impact is limited by the privileges required and the service account's write permissions.

No official patch or remediation guidance has been published by the vendor as of now. Organizations should monitor the vendor advisory for updates. Until a fix is available, restrict the settings_branches_manage privilege to trusted users only and audit branch code inputs for suspicious path traversal patterns to mitigate exploitation risk.