Vulnerability · Published Jun 22, 2026 · Assigned by SCHUTZWERK

CVE-2025-4994Authentication Bypass for SafeLine SL6 and SL6+

High 8.7

In plain English

A high-severity security flaw in SafeLine SL6/SL6+ from SafeLine. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).

Severity (CVSS 4.0)8.7High

Exploit odds (30 days)0.3%top 73.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configuration service via the Bluetooth Low Energy (BLE) interface. Consequently, an attacker within wireless range can gain unauthorized administrative access to the device configuration.

Affected products (as reported)

Vendor	Product	Versions
SafeLine	SafeLine SL6/SL6+	4.82 – before 4.97

Weakness: CWE-305 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

In plain English

Official description

Affected products (as reported)

References