CVE-2025-4994Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device's configuration service via the Bluetooth Low Energy (BLE) interface. Consequently, an attacker within wireless range can gain unauthorized administrative access to the device configuration.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-305

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-06-22: 3Technical Details · 2026-06-22: 306-22
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2025-4994 The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to… https://www.cve.org/CVERecord?id=CVE-2025-4994 ----- Traducción: CVE-2025-4994 Los… http://infoflow.cloud`

    Post summary

    Announcement of an authentication bypass vulnerability (CVE‑2025‑4994) affecting SafeLine elevator intercom devices, with a link to the CVE record.

    0000073
    88 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-4994 The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to… https://www.cve.org/CVERecord?id=CVE-2025-4994

    Post summary

    The post announces that CVE-2025-4994, an authentication bypass in SafeLine SL6 and SL6+ elevator intercom devices, has been identified.

    00000787
    57.7K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2025-4994 Authentication Bypass in SafeLine SL6 and SL6+ Elevator Intercom Devices via BLE https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-4994

    Post summary

    A concise disclosure of CVE-2025-4994, describing an authentication bypass vulnerability via BLE in SafeLine elevator intercom devices, without additional PoC, exploit, or patch details.

    00000117
    4.1K followersView on X

Explore more