CVE-2025-4994
Authentication Bypass for SafeLine SL6 and SL6+
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configuration service via the Bluetooth Low Energy (BLE) interface. Consequently, an attacker within wireless range can gain unauthorized administrative access to the device configuration.
| CWE | CWE-305 |
| Vendor | safeline |
| Product | safeline sl6/sl6+ |
| Published | Jun 22, 2026 |
| Last Updated | Jun 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for safeline safeline sl6/sl6+
Be the first to know when new unknown vulnerabilities affecting safeline safeline sl6/sl6+ are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
SafeLine / SafeLine SL6/SL6+
4.82 < 4.97
References
Credits
The vulnerability was discovered by Jan Hüber of SCHUTZWERK GmbH.