Raw JSON
{
"containers": {
"cna": {
"affected": [
{
"product": "SCHUTZWERK-SA-2025-001 Authentication Bypass",
"vendor": "unknown",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Jan Hüber via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n\nAuthentication Bypass for SafeLine SL6 and SL6+\n===============================================\n\n\ngain unauthorized administrative access to the device configuration.\n\nMetadata\n========\n\n* Affected product: SafeLine SL6/SL6+\n* Affected version: Introduced in version 4.82, patched in version 4.97\n* Vendor: SafeLine\n* Problem type(s): CWE-305 Authentication bypass by primary weakness\n* CVE ID: CVE-2025-4994\n* CVE URL: https://www.cve.org/CVERecord?id=CVE-2025-4994\n* CVSS 4.0 score: 8.7\n* Advisory URL: https://www.schutzwerk.com/blog/schutzwerk-sa-2025-001/\n\nDetails\n=======\n\n\ndepending on the \"Auto Enable BLE\" configuration setting:\n\n\n by a configurable PIN.\n\n enabled by a reboot.\n\n\nto the target device and is fully reproducible.\n\nRisk\n====\n\n\nan incident.\n\nWorkaround\n==========\n\n\ninterface.\n\nSolution/Mitigation\n===================\n\n\n\n\nshould be applied.\n\nTimeline\n========\n\n* 2025-03-28 Vulnerability discovered\n* 2025-04-14 Initial contact with vendor\n* 2025-04-16 Vulnerability reported to technical support of vendor\n* 2025-05-08 Follow-up meeting was canceled by vendor\n* 2025-05-16 Initial contact with CTO of vendor\n* 2025-05-28 Vulnerability presented to CTO of vendor\n* 2025-06-16 Vendor informed SCHUTZWERK that the patch is currently tested\n* 2025-07-03 Follow-up meeting was canceled by vendor\n* 2025-07-31 Follow-up meeting was requested by SCHUTZWERK\n* 2025-08-21 Vendor informed SCHUTZWERK that the patch was postponed\n* 2025-08-28 Vendor informed SCHUTZWERK that the patch is currently tested\n* 2025-12-19 Vendor informed SCHUTZWERK that the patch was released\n\n scheduled maintenance windows\n* 2026-06-19 Advisory released by SCHUTZWERK\n\nCredits\n=======\n\nThe vulnerability was discovered by Jan Hüber of SCHUTZWERK GmbH\n-----BEGIN PGP SIGNATURE-----\n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\nMUv9NZtj3B224OsNyt8EhjA=\n=JAMF\n-----END PGP SIGNATURE-----\n\n--\nSCHUTZWERK GmbH, Pfarrer-Weiß-Weg 12, 89077 Ulm, Germany\nZertifiziert / Certified ISO 27001, 9001 and TISAX\n\nPhone +49 731 977 191 0\n\nadvisories () schutzwerk com / www.schutzwerk.com\n\nGeschäftsführer / Managing Directors:\nJakob Pietzka, Michael Schäfer\n\nAmtsgericht Ulm / HRB 727391\nDatenschutz / Data Protection www.schutzwerk.com/datenschutz\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives & RSS: https://seclists.org/fulldisclosure/"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-305",
"description": "CWE-305",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-07T13:20:21Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jul/17"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Jul/17"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://seclists.org/fulldisclosure/"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4994"
},
{
"url": "https://www.schutzwerk.com/blog/schutzwerk-sa-2025-001/"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Jul/17"
],
"discovery": "EXTERNAL"
},
"title": "SCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+",
"x_gcve": [
{
"recordType": "advisory",
"relationships": [],
"vulnId": "GCVE-1988-2026-0064",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jul/17",
"automated": true,
"contentSha256": "bc6c342cc53996cd7d0cca6d5aaabd93c68cf21047b68bdfb4e82668635ad803",
"evidenceScore": 8,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Jul/17",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-07-06T11:24:41Z"
}
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-09-07T13:20:21Z",
"dateUpdated": "2026-09-07T13:20:21Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0064"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}