There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS. The vulnerability allows for unauthenticated kinetic effects and information disclosure on the faucets. It is possible to use the Bluetooth Low Energy (BLE) connectivity to read and write to many BLE characteristics on the device. Some of these control the flow of water, the sensitivity of the sensors, and information about maintenance.

Project Subscriptions

Vendors Products
Basys Efx-100 Subscribe
Basys Efx-100 Firmware Subscribe
Basys Efx-150 Subscribe
Basys Efx-150 Firmware Subscribe
Basys Efx-175 Subscribe
Basys Efx-175 Firmware Subscribe
Basys Efx-177 Subscribe
Basys Efx-177 Firmware Subscribe
Basys Efx-180 Subscribe
Basys Efx-180 Firmware Subscribe
Basys Efx-200 Subscribe
Basys Efx-200 Firmware Subscribe
Basys Efx-250 Subscribe
Basys Efx-250 Firmware Subscribe
Basys Efx-275 Subscribe
Basys Efx-275 Firmware Subscribe
Basys Efx-277 Subscribe
Basys Efx-277 Firmware Subscribe
Basys Efx-280 Subscribe
Basys Efx-280 Firmware Subscribe
Basys Efx-300 Subscribe
Basys Efx-300 Firmware Subscribe
Basys Efx-350 Subscribe
Basys Efx-350 Firmware Subscribe
Basys Efx-375 Subscribe
Basys Efx-375 Firmware Subscribe
Basys Efx-377 Subscribe
Basys Efx-377 Firmware Subscribe
Basys Efx-380 Subscribe
Basys Efx-380 Firmware Subscribe
Basys Efx-600 Subscribe
Basys Efx-600 Firmware Subscribe
Basys Efx-650 Subscribe
Basys Efx-650 Firmware Subscribe
Basys Efx-675 Subscribe
Basys Efx-675 Firmware Subscribe
Basys Efx-677 Subscribe
Basys Efx-677 Firmware Subscribe
Basys Efx-680 Subscribe
Basys Efx-680 Firmware Subscribe
Basys Efx-800 Subscribe
Basys Efx-800 Firmware Subscribe
Basys Efx-850 Subscribe
Basys Efx-850 Firmware Subscribe
Optima Eaf-100 Subscribe
Optima Eaf-100 Firmware Subscribe
Optima Eaf-150 Subscribe
Optima Eaf-150 Firmware Subscribe
Optima Eaf-200 Subscribe
Optima Eaf-200 Firmware Subscribe
Optima Eaf-225 Subscribe
Optima Eaf-225 Firmware Subscribe
Optima Eaf-250 Subscribe
Optima Eaf-250 Firmware Subscribe
Optima Eaf-275 Subscribe
Optima Eaf-275 Firmware Subscribe
Optima Eaf-350 Subscribe
Optima Eaf-350 Firmware Subscribe
Optima Eaf-700 Subscribe
Optima Eaf-700 Firmware Subscribe
Optima Eaf-750 Subscribe
Optima Eaf-750 Firmware Subscribe
Optima Ebf-187 Subscribe
Optima Ebf-187 Firmware Subscribe
Optima Ebf-415 Subscribe
Optima Ebf-415 Firmware Subscribe
Optima Ebf-425 Subscribe
Optima Ebf-425 Firmware Subscribe
Optima Ebf-550 Subscribe
Optima Ebf-550 Firmware Subscribe
Optima Ebf-615 Subscribe
Optima Ebf-615 Firmware Subscribe
Optima Ebf-650 Subscribe
Optima Ebf-650 Firmware Subscribe
Optima Ebf-665 Subscribe
Optima Ebf-665 Firmware Subscribe
Optima Ebf-750 Subscribe
Optima Ebf-750 Firmware Subscribe
Optima Ebf-775 Subscribe
Optima Ebf-775 Firmware Subscribe
Optima Ebf-85 Subscribe
Optima Ebf-850 Subscribe
Optima Ebf-850 Firmware Subscribe
Optima Ebf-85 Firmware Subscribe
Optima Etf-410 Subscribe
Optima Etf-410 Firmware Subscribe
Optima Etf-420 Subscribe
Optima Etf-420 Firmware Subscribe
Optima Etf-500 Subscribe
Optima Etf-500 Firmware Subscribe
Optima Etf-600 Subscribe
Optima Etf-600 Firmware Subscribe
Optima Etf-610 Subscribe
Optima Etf-610 Firmware Subscribe
Optima Etf-660 Subscribe
Optima Etf-660 Firmware Subscribe
Optima Etf-700 Subscribe
Optima Etf-700 Firmware Subscribe
Optima Etf-770 Subscribe
Optima Etf-770 Firmware Subscribe
Optima Etf-80 Subscribe
Optima Etf-800 Subscribe
Optima Etf-800 Firmware Subscribe
Optima Etf-80 Firmware Subscribe
Optima Etf-880 Subscribe
Optima Etf-880 Firmware Subscribe
Solis 8110 Subscribe
Solis 8110 Firmware Subscribe
Solis 8111 Subscribe
Solis 8111 Bt Subscribe
Solis 8111 Bt Firmware Subscribe
Solis 8111 Firmware Subscribe
Solis 8113 Subscribe
Solis 8113 Firmware Subscribe
Solis 8115 Subscribe
Solis 8115 Firmware Subscribe
Solis 8116 Subscribe
Solis 8116 Firmware Subscribe
Solis 8137 Subscribe
Solis 8137 Firmware Subscribe
Solis 8152 Subscribe
Solis 8152 Firmware Subscribe
Solis 8153 Subscribe
Solis 8153 Firmware Subscribe
Solis 8180 Subscribe
Solis 8180 Firmware Subscribe
Solis 8186 Subscribe
Solis 8186 Bt Subscribe
Solis 8186 Bt Firmware Subscribe
Solis 8186 Firmware Subscribe
Solis 8195 Subscribe
Solis 8195 Firmware Subscribe
Solis Bpw 8000 Subscribe
Solis Bpw 8000 Firmware Subscribe
Solis Ress-c Subscribe
Solis Ress-c Bt Subscribe
Solis Ress-c Bt Firmware Subscribe
Solis Ress-c Firmware Subscribe
Solis Ress-u Subscribe
Solis Ress-u Bt Subscribe
Solis Ress-u Bt Firmware Subscribe
Solis Ress-u Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2021-7564 There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS. The vulnerability allows for unauthenticated kinetic effects and information disclosure on the faucets. It is possible to use the Bluetooth Low Energy (BLE) connectivity to read and write to many BLE characteristics on the device. Some of these control the flow of water, the sensitivity of the sensors, and information about maintenance.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: tenable

Published:

Updated: 2024-08-03T17:30:08.193Z

Reserved: 2020-12-17T00:00:00

Link: CVE-2021-20107

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-06-30T14:15:08.487

Modified: 2024-11-21T05:45:56.130

Link: CVE-2021-20107

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses