CVE-2025-4994

The record

The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configuration service via the Bluetooth Low Energy (BLE) interface. Consequently, an attacker within wireless range can gain unauthorized administrative access to the device configuration.

Affected packages

Related vulnerabilities

• CVE-2026-88837 BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic… CWE-305
• CVE-2026-86207 An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in… CWE-305
• CVE-2026-16895 A logic vulnerability (fail-open condition) has been identified within the Metasploit… CWE-305
• CVE-2026-78619 Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code… CWE-305
• CVE-2026-19349 Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from… CWE-305
• CVE-2026-1621 Authentication bypass by primary weakness vulnerability in Universal Software Inc. CWE-305
• CVE-2026-65935 Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by… CWE-305
• CVE-2026-19292 Re-pairing with a legitimate device can use a lower security level than previous making… CWE-305