There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS. The vulnerability allows for unauthenticated kinetic effects and information disclosure on the faucets. It is possible to use the Bluetooth Low Energy (BLE) connectivity to read and write to many BLE characteristics on the device. Some of these control the flow of water, the sensitivity of the sensors, and information about maintenance.
Project Subscriptions
| Vendors | Products |
|---|---|
|
Sloan
Subscribe
|
Basys Efx-100
Subscribe
Basys Efx-100 Firmware
Subscribe
Basys Efx-150
Subscribe
Basys Efx-150 Firmware
Subscribe
Basys Efx-175
Subscribe
Basys Efx-175 Firmware
Subscribe
Basys Efx-177
Subscribe
Basys Efx-177 Firmware
Subscribe
Basys Efx-180
Subscribe
Basys Efx-180 Firmware
Subscribe
Basys Efx-200
Subscribe
Basys Efx-200 Firmware
Subscribe
Basys Efx-250
Subscribe
Basys Efx-250 Firmware
Subscribe
Basys Efx-275
Subscribe
Basys Efx-275 Firmware
Subscribe
Basys Efx-277
Subscribe
Basys Efx-277 Firmware
Subscribe
Basys Efx-280
Subscribe
Basys Efx-280 Firmware
Subscribe
Basys Efx-300
Subscribe
Basys Efx-300 Firmware
Subscribe
Basys Efx-350
Subscribe
Basys Efx-350 Firmware
Subscribe
Basys Efx-375
Subscribe
Basys Efx-375 Firmware
Subscribe
Basys Efx-377
Subscribe
Basys Efx-377 Firmware
Subscribe
Basys Efx-380
Subscribe
Basys Efx-380 Firmware
Subscribe
Basys Efx-600
Subscribe
Basys Efx-600 Firmware
Subscribe
Basys Efx-650
Subscribe
Basys Efx-650 Firmware
Subscribe
Basys Efx-675
Subscribe
Basys Efx-675 Firmware
Subscribe
Basys Efx-677
Subscribe
Basys Efx-677 Firmware
Subscribe
Basys Efx-680
Subscribe
Basys Efx-680 Firmware
Subscribe
Basys Efx-800
Subscribe
Basys Efx-800 Firmware
Subscribe
Basys Efx-850
Subscribe
Basys Efx-850 Firmware
Subscribe
Optima Eaf-100
Subscribe
Optima Eaf-100 Firmware
Subscribe
Optima Eaf-150
Subscribe
Optima Eaf-150 Firmware
Subscribe
Optima Eaf-200
Subscribe
Optima Eaf-200 Firmware
Subscribe
Optima Eaf-225
Subscribe
Optima Eaf-225 Firmware
Subscribe
Optima Eaf-250
Subscribe
Optima Eaf-250 Firmware
Subscribe
Optima Eaf-275
Subscribe
Optima Eaf-275 Firmware
Subscribe
Optima Eaf-350
Subscribe
Optima Eaf-350 Firmware
Subscribe
Optima Eaf-700
Subscribe
Optima Eaf-700 Firmware
Subscribe
Optima Eaf-750
Subscribe
Optima Eaf-750 Firmware
Subscribe
Optima Ebf-187
Subscribe
Optima Ebf-187 Firmware
Subscribe
Optima Ebf-415
Subscribe
Optima Ebf-415 Firmware
Subscribe
Optima Ebf-425
Subscribe
Optima Ebf-425 Firmware
Subscribe
Optima Ebf-550
Subscribe
Optima Ebf-550 Firmware
Subscribe
Optima Ebf-615
Subscribe
Optima Ebf-615 Firmware
Subscribe
Optima Ebf-650
Subscribe
Optima Ebf-650 Firmware
Subscribe
Optima Ebf-665
Subscribe
Optima Ebf-665 Firmware
Subscribe
Optima Ebf-750
Subscribe
Optima Ebf-750 Firmware
Subscribe
Optima Ebf-775
Subscribe
Optima Ebf-775 Firmware
Subscribe
Optima Ebf-85
Subscribe
Optima Ebf-850
Subscribe
Optima Ebf-850 Firmware
Subscribe
Optima Ebf-85 Firmware
Subscribe
Optima Etf-410
Subscribe
Optima Etf-410 Firmware
Subscribe
Optima Etf-420
Subscribe
Optima Etf-420 Firmware
Subscribe
Optima Etf-500
Subscribe
Optima Etf-500 Firmware
Subscribe
Optima Etf-600
Subscribe
Optima Etf-600 Firmware
Subscribe
Optima Etf-610
Subscribe
Optima Etf-610 Firmware
Subscribe
Optima Etf-660
Subscribe
Optima Etf-660 Firmware
Subscribe
Optima Etf-700
Subscribe
Optima Etf-700 Firmware
Subscribe
Optima Etf-770
Subscribe
Optima Etf-770 Firmware
Subscribe
Optima Etf-80
Subscribe
Optima Etf-800
Subscribe
Optima Etf-800 Firmware
Subscribe
Optima Etf-80 Firmware
Subscribe
Optima Etf-880
Subscribe
Optima Etf-880 Firmware
Subscribe
Solis 8110
Subscribe
Solis 8110 Firmware
Subscribe
Solis 8111
Subscribe
Solis 8111 Bt
Subscribe
Solis 8111 Bt Firmware
Subscribe
Solis 8111 Firmware
Subscribe
Solis 8113
Subscribe
Solis 8113 Firmware
Subscribe
Solis 8115
Subscribe
Solis 8115 Firmware
Subscribe
Solis 8116
Subscribe
Solis 8116 Firmware
Subscribe
Solis 8137
Subscribe
Solis 8137 Firmware
Subscribe
Solis 8152
Subscribe
Solis 8152 Firmware
Subscribe
Solis 8153
Subscribe
Solis 8153 Firmware
Subscribe
Solis 8180
Subscribe
Solis 8180 Firmware
Subscribe
Solis 8186
Subscribe
Solis 8186 Bt
Subscribe
Solis 8186 Bt Firmware
Subscribe
Solis 8186 Firmware
Subscribe
Solis 8195
Subscribe
Solis 8195 Firmware
Subscribe
Solis Bpw 8000
Subscribe
Solis Bpw 8000 Firmware
Subscribe
Solis Ress-c
Subscribe
Solis Ress-c Bt
Subscribe
Solis Ress-c Bt Firmware
Subscribe
Solis Ress-c Firmware
Subscribe
Solis Ress-u
Subscribe
Solis Ress-u Bt
Subscribe
Solis Ress-u Bt Firmware
Subscribe
Solis Ress-u Firmware
Subscribe
|
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2021-7564 | There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS. The vulnerability allows for unauthenticated kinetic effects and information disclosure on the faucets. It is possible to use the Bluetooth Low Energy (BLE) connectivity to read and write to many BLE characteristics on the device. Some of these control the flow of water, the sensitivity of the sensors, and information about maintenance. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.tenable.com/security/research/tra-2021-26-0 |
|
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: tenable
Published:
Updated: 2024-08-03T17:30:08.193Z
Reserved: 2020-12-17T00:00:00
Link: CVE-2021-20107
No data.
Status : Modified
Published: 2021-06-30T14:15:08.487
Modified: 2024-11-21T05:45:56.130
Link: CVE-2021-20107
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD