What is GHSA-4w8g-q38j-gm8m?

GHSA-4w8g-q38j-gm8m is a security advisory published by GitHub Security Advisories with High severity. The Wertheim SafeController 5400, Controller 5400 - AssemblyVersion 6.11.8130.22320, uses RS-485...

Which CVE IDs does GHSA-4w8g-q38j-gm8m cover?

GHSA-4w8g-q38j-gm8m covers the following CVE IDs: CVE-2026-34021. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-4w8g-q38j-gm8mHigh

The Wertheim SafeController 5400, Controller 5400 - AssemblyVersion 6.11.8130.22320, uses RS-485...

Vendor

GitHub Security Advisories

Published

June 15, 2026

Last Modified

June 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-34021 →

📋 Description

The Wertheim SafeController 5400, Controller 5400 - AssemblyVersion 6.11.8130.22320, uses RS-485 communication between the server and the microcontroller without cryptographic protection. An attacker with access to the communication path between the server and the microcontroller can sniff RS-485 messages and replay previously observed messages. This can be used, for example, to spoof a "quit alarm" message and continuously deactivate the safe alarm.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-34021
https://r.sec-consult.com/wertdev
https://wertheim-safes.com/safe-deposit-boxes
https://github.com/advisories/GHSA-4w8g-q38j-gm8m