CVE-2025-4994CWE-305

CVE-2025-4994

published June 22, 2026

CVSS
8.7
EPSS
0%
Percentile
25.1
In the wild
Unconfirmed
What it is

The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configuration service via the Bluetooth Low Energy (BLE) interface. Consequently, an attacker within wireless range can gain unauthorized administrative access to the device configuration.

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
Not supplied
EPSS
0.00331 · 25.1th percentile
Weakness
CWE-305 · Authentication Bypass by Primary Weakness
Published
2026-06-22T14:16Z
References (2)
EPSS history
Timeline
  • 22 JUN 08:10Z
    Authentication Bypass for SafeLine SL6 and SL6+
    cvelistv5