PT-2026-51287 · Safeline · Safeline Sl6/Sl6+

Jan Hüber · Published 2026-06-22 · Updated 2026-06-22 · CVE-2025-4994

Mitre

CVSS v4.0

8.7

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configuration service via the Bluetooth Low Energy (BLE) interface. Consequently, an attacker within wireless range can gain unauthorized administrative access to the device configuration.

Fix

Weakness Enumeration

CWE-305

Related Identifiers

CVE-2025-4994

Affected Products

Safeline Sl6/Sl6+

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-4994 · Security Note
• https://schutzwerk.com/en/blog/schutzwerk-sa-2025-001 · Note