CVE-2025-4994
Authentication Bypass for SafeLine SL6 and SL6+
- State
- Published
- Severity
- 8.7 High
- Published
- Jun 22, 2026
- Updated
- Jul 7, 2026
- Reserved
- May 20, 2025
Description
The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configuration service via the Bluetooth Low Energy (BLE) interface. Consequently, an attacker within wireless range can gain unauthorized administrative access to the device configuration.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | SCHUTZWERK |
Weaknesses
- CWE-305 Authentication bypass by primary weakness
Affected Products
| Product | Versions |
|---|---|
SafeLine SL6/SL6+SafeLine |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.