CVE-2021-20107
Summary
| CVE | CVE-2021-20107 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-06-30 14:15:00 UTC |
| Updated | 2022-06-28 14:11:00 UTC |
| Description | There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS. The vulnerability allows for unauthenticated kinetic effects and information disclosure on the faucets. It is possible to use the Bluetooth Low Energy (BLE) connectivity to read and write to many BLE characteristics on the device. Some of these control the flow of water, the sensitivity of the sensors, and information about maintenance. |
Risk And Classification
Problem Types: CWE-306
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Sloan | Basys Efx-100 | - | All | All | All |
| Operating System | Sloan | Basys Efx-100 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-150 | - | All | All | All |
| Operating System | Sloan | Basys Efx-150 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-175 | - | All | All | All |
| Operating System | Sloan | Basys Efx-175 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-177 | - | All | All | All |
| Operating System | Sloan | Basys Efx-177 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-180 | - | All | All | All |
| Operating System | Sloan | Basys Efx-180 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-200 | - | All | All | All |
| Operating System | Sloan | Basys Efx-200 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-250 | - | All | All | All |
| Operating System | Sloan | Basys Efx-250 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-275 | - | All | All | All |
| Operating System | Sloan | Basys Efx-275 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-277 | - | All | All | All |
| Operating System | Sloan | Basys Efx-277 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-280 | - | All | All | All |
| Operating System | Sloan | Basys Efx-280 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-300 | - | All | All | All |
| Operating System | Sloan | Basys Efx-300 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-350 | - | All | All | All |
| Operating System | Sloan | Basys Efx-350 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-375 | - | All | All | All |
| Operating System | Sloan | Basys Efx-375 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-377 | - | All | All | All |
| Operating System | Sloan | Basys Efx-377 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-380 | - | All | All | All |
| Operating System | Sloan | Basys Efx-380 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-600 | - | All | All | All |
| Operating System | Sloan | Basys Efx-600 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-650 | - | All | All | All |
| Operating System | Sloan | Basys Efx-650 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-675 | - | All | All | All |
| Operating System | Sloan | Basys Efx-675 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-677 | - | All | All | All |
| Operating System | Sloan | Basys Efx-677 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-680 | - | All | All | All |
| Operating System | Sloan | Basys Efx-680 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-800 | - | All | All | All |
| Operating System | Sloan | Basys Efx-800 Firmware | - | All | All | All |
| Hardware | Sloan | Basys Efx-850 | - | All | All | All |
| Operating System | Sloan | Basys Efx-850 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Eaf-100 | - | All | All | All |
| Operating System | Sloan | Optima Eaf-100 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Eaf-150 | - | All | All | All |
| Operating System | Sloan | Optima Eaf-150 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Eaf-200 | - | All | All | All |
| Operating System | Sloan | Optima Eaf-200 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Eaf-225 | - | All | All | All |
| Operating System | Sloan | Optima Eaf-225 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Eaf-250 | - | All | All | All |
| Operating System | Sloan | Optima Eaf-250 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Eaf-275 | - | All | All | All |
| Operating System | Sloan | Optima Eaf-275 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Eaf-350 | - | All | All | All |
| Operating System | Sloan | Optima Eaf-350 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Eaf-700 | - | All | All | All |
| Operating System | Sloan | Optima Eaf-700 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Eaf-750 | - | All | All | All |
| Operating System | Sloan | Optima Eaf-750 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Ebf-187 | - | All | All | All |
| Operating System | Sloan | Optima Ebf-187 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Ebf-415 | - | All | All | All |
| Operating System | Sloan | Optima Ebf-415 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Ebf-425 | - | All | All | All |
| Operating System | Sloan | Optima Ebf-425 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Ebf-550 | - | All | All | All |
| Operating System | Sloan | Optima Ebf-550 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Ebf-615 | - | All | All | All |
| Operating System | Sloan | Optima Ebf-615 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Ebf-650 | - | All | All | All |
| Operating System | Sloan | Optima Ebf-650 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Ebf-665 | - | All | All | All |
| Operating System | Sloan | Optima Ebf-665 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Ebf-750 | - | All | All | All |
| Operating System | Sloan | Optima Ebf-750 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Ebf-775 | - | All | All | All |
| Operating System | Sloan | Optima Ebf-775 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Ebf-85 | - | All | All | All |
| Hardware | Sloan | Optima Ebf-850 | - | All | All | All |
| Operating System | Sloan | Optima Ebf-850 Firmware | - | All | All | All |
| Operating System | Sloan | Optima Ebf-85 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Etf-410 | - | All | All | All |
| Operating System | Sloan | Optima Etf-410 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Etf-420 | - | All | All | All |
| Operating System | Sloan | Optima Etf-420 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Etf-500 | - | All | All | All |
| Operating System | Sloan | Optima Etf-500 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Etf-600 | - | All | All | All |
| Operating System | Sloan | Optima Etf-600 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Etf-610 | - | All | All | All |
| Operating System | Sloan | Optima Etf-610 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Etf-660 | - | All | All | All |
| Operating System | Sloan | Optima Etf-660 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Etf-700 | - | All | All | All |
| Operating System | Sloan | Optima Etf-700 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Etf-770 | - | All | All | All |
| Operating System | Sloan | Optima Etf-770 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Etf-80 | - | All | All | All |
| Hardware | Sloan | Optima Etf-800 | - | All | All | All |
| Operating System | Sloan | Optima Etf-800 Firmware | - | All | All | All |
| Operating System | Sloan | Optima Etf-80 Firmware | - | All | All | All |
| Hardware | Sloan | Optima Etf-880 | - | All | All | All |
| Operating System | Sloan | Optima Etf-880 Firmware | - | All | All | All |
| Hardware | Sloan | Solis 8110 | - | All | All | All |
| Operating System | Sloan | Solis 8110 Firmware | - | All | All | All |
| Hardware | Sloan | Solis 8111 | - | All | All | All |
| Hardware | Sloan | Solis 8111 Bt | - | All | All | All |
| Operating System | Sloan | Solis 8111 Bt Firmware | - | All | All | All |
| Operating System | Sloan | Solis 8111 Firmware | - | All | All | All |
| Hardware | Sloan | Solis 8113 | - | All | All | All |
| Operating System | Sloan | Solis 8113 Firmware | - | All | All | All |
| Hardware | Sloan | Solis 8115 | - | All | All | All |
| Operating System | Sloan | Solis 8115 Firmware | - | All | All | All |
| Hardware | Sloan | Solis 8116 | - | All | All | All |
| Operating System | Sloan | Solis 8116 Firmware | - | All | All | All |
| Hardware | Sloan | Solis 8137 | - | All | All | All |
| Operating System | Sloan | Solis 8137 Firmware | - | All | All | All |
| Hardware | Sloan | Solis 8152 | - | All | All | All |
| Operating System | Sloan | Solis 8152 Firmware | - | All | All | All |
| Hardware | Sloan | Solis 8153 | - | All | All | All |
| Operating System | Sloan | Solis 8153 Firmware | - | All | All | All |
| Hardware | Sloan | Solis 8180 | - | All | All | All |
| Operating System | Sloan | Solis 8180 Firmware | - | All | All | All |
| Hardware | Sloan | Solis 8186 | - | All | All | All |
| Hardware | Sloan | Solis 8186 Bt | - | All | All | All |
| Operating System | Sloan | Solis 8186 Bt Firmware | - | All | All | All |
| Operating System | Sloan | Solis 8186 Firmware | - | All | All | All |
| Hardware | Sloan | Solis 8195 | - | All | All | All |
| Operating System | Sloan | Solis 8195 Firmware | - | All | All | All |
| Hardware | Sloan | Solis Bpw 8000 | - | All | All | All |
| Operating System | Sloan | Solis Bpw 8000 Firmware | - | All | All | All |
| Hardware | Sloan | Solis Ress-c | - | All | All | All |
| Hardware | Sloan | Solis Ress-c Bt | - | All | All | All |
| Operating System | Sloan | Solis Ress-c Bt Firmware | - | All | All | All |
| Operating System | Sloan | Solis Ress-c Firmware | - | All | All | All |
| Hardware | Sloan | Solis Ress-u | - | All | All | All |
| Hardware | Sloan | Solis Ress-u Bt | - | All | All | All |
| Operating System | Sloan | Solis Ress-u Bt Firmware | - | All | All | All |
| Operating System | Sloan | Solis Ress-u Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Sloan Smart Faucet Unauthenticated BLE - Research Advisory | Tenable® | MISC | www.tenable.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.