CVE-2021-20107

Exploit

EPSS 0.07%
Veröffentlicht 30.06.2021 14:15:08
Zuletzt bearbeitet 21.11.2024 05:45:56
Quelle vulnreport@tenable.com
CVE-Watchlists
Login
Unerledigt
Login

There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS. The vulnerability allows for unauthenticated kinetic effects and information disclosure on the faucets. It is possible to use the Bluetooth Low Energy (BLE) connectivity to read and write to many BLE characteristics on the device. Some of these control the flow of water, the sensitivity of the sensors, and information about maintenance.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Sloan ≫ Optima Eaf-100 Firmware Version-

Sloan ≫ Optima Eaf-100 Version-

Sloan ≫ Optima Eaf-150 Firmware Version-

Sloan ≫ Optima Eaf-150 Version-

Sloan ≫ Optima Eaf-200 Firmware Version-

Sloan ≫ Optima Eaf-200 Version-

Sloan ≫ Optima Eaf-225 Firmware Version-

Sloan ≫ Optima Eaf-225 Version-

Sloan ≫ Optima Eaf-250 Firmware Version-

Sloan ≫ Optima Eaf-250 Version-

Sloan ≫ Optima Eaf-275 Firmware Version-

Sloan ≫ Optima Eaf-275 Version-

Sloan ≫ Optima Eaf-350 Firmware Version-

Sloan ≫ Optima Eaf-350 Version-

Sloan ≫ Optima Eaf-700 Firmware Version-

Sloan ≫ Optima Eaf-700 Version-

Sloan ≫ Optima Eaf-750 Firmware Version-

Sloan ≫ Optima Eaf-750 Version-

Sloan ≫ Optima Ebf-187 Firmware Version-

Sloan ≫ Optima Ebf-187 Version-

Sloan ≫ Optima Ebf-415 Firmware Version-

Sloan ≫ Optima Ebf-415 Version-

Sloan ≫ Optima Ebf-425 Firmware Version-

Sloan ≫ Optima Ebf-425 Version-

Sloan ≫ Optima Ebf-550 Firmware Version-

Sloan ≫ Optima Ebf-550 Version-

Sloan ≫ Optima Ebf-615 Firmware Version-

Sloan ≫ Optima Ebf-615 Version-

Sloan ≫ Optima Ebf-650 Firmware Version-

Sloan ≫ Optima Ebf-650 Version-

Sloan ≫ Optima Ebf-665 Firmware Version-

Sloan ≫ Optima Ebf-665 Version-

Sloan ≫ Optima Ebf-750 Firmware Version-

Sloan ≫ Optima Ebf-750 Version-

Sloan ≫ Optima Ebf-775 Firmware Version-

Sloan ≫ Optima Ebf-775 Version-

Sloan ≫ Optima Ebf-85 Firmware Version-

Sloan ≫ Optima Ebf-85 Version-

Sloan ≫ Optima Ebf-850 Firmware Version-

Sloan ≫ Optima Ebf-850 Version-

Sloan ≫ Optima Etf-610 Firmware Version-

Sloan ≫ Optima Etf-610 Version-

Sloan ≫ Optima Etf-600 Firmware Version-

Sloan ≫ Optima Etf-600 Version-

Sloan ≫ Optima Etf-410 Firmware Version-

Sloan ≫ Optima Etf-410 Version-

Sloan ≫ Optima Etf-420 Firmware Version-

Sloan ≫ Optima Etf-420 Version-

Sloan ≫ Optima Etf-500 Firmware Version-

Sloan ≫ Optima Etf-500 Version-

Sloan ≫ Optima Etf-660 Firmware Version-

Sloan ≫ Optima Etf-660 Version-

Sloan ≫ Optima Etf-700 Firmware Version-

Sloan ≫ Optima Etf-700 Version-

Sloan ≫ Optima Etf-770 Firmware Version-

Sloan ≫ Optima Etf-770 Version-

Sloan ≫ Optima Etf-80 Firmware Version-

Sloan ≫ Optima Etf-80 Version-

Sloan ≫ Optima Etf-800 Firmware Version-

Sloan ≫ Optima Etf-800 Version-

Sloan ≫ Optima Etf-880 Firmware Version-

Sloan ≫ Optima Etf-880 Version-

Sloan ≫ Basys Efx-300 Firmware Version-

Sloan ≫ Basys Efx-300 Version-

Sloan ≫ Basys Efx-350 Firmware Version-

Sloan ≫ Basys Efx-350 Version-

Sloan ≫ Basys Efx-375 Firmware Version-

Sloan ≫ Basys Efx-375 Version-

Sloan ≫ Basys Efx-377 Firmware Version-

Sloan ≫ Basys Efx-377 Version-

Sloan ≫ Basys Efx-380 Firmware Version-

Sloan ≫ Basys Efx-380 Version-

Sloan ≫ Basys Efx-600 Firmware Version-

Sloan ≫ Basys Efx-600 Version-

Sloan ≫ Basys Efx-650 Firmware Version-

Sloan ≫ Basys Efx-650 Version-

Sloan ≫ Basys Efx-675 Firmware Version-

Sloan ≫ Basys Efx-675 Version-

Sloan ≫ Basys Efx-677 Firmware Version-

Sloan ≫ Basys Efx-677 Version-

Sloan ≫ Basys Efx-680 Firmware Version-

Sloan ≫ Basys Efx-680 Version-

Sloan ≫ Basys Efx-200 Firmware Version-

Sloan ≫ Basys Efx-200 Version-

Sloan ≫ Basys Efx-250 Firmware Version-

Sloan ≫ Basys Efx-250 Version-

Sloan ≫ Basys Efx-275 Firmware Version-

Sloan ≫ Basys Efx-275 Version-

Sloan ≫ Basys Efx-277 Firmware Version-

Sloan ≫ Basys Efx-277 Version-

Sloan ≫ Basys Efx-280 Firmware Version-

Sloan ≫ Basys Efx-280 Version-

Sloan ≫ Basys Efx-100 Firmware Version-

Sloan ≫ Basys Efx-100 Version-

Sloan ≫ Basys Efx-150 Firmware Version-

Sloan ≫ Basys Efx-150 Version-

Sloan ≫ Basys Efx-175 Firmware Version-

Sloan ≫ Basys Efx-175 Version-

Sloan ≫ Basys Efx-177 Firmware Version-

Sloan ≫ Basys Efx-177 Version-

Sloan ≫ Basys Efx-180 Firmware Version-

Sloan ≫ Basys Efx-180 Version-

Sloan ≫ Basys Efx-800 Firmware Version-

Sloan ≫ Basys Efx-800 Version-

Sloan ≫ Basys Efx-850 Firmware Version-

Sloan ≫ Basys Efx-850 Version-

Sloan ≫ Solis 8111 Firmware Version-

Sloan ≫ Solis 8111 Version-

Sloan ≫ Solis 8186 Firmware Version-

Sloan ≫ Solis 8186 Version-

Sloan ≫ Solis Ress-c Firmware Version-

Sloan ≫ Solis Ress-c Version-

Sloan ≫ Solis Ress-u Firmware Version-

Sloan ≫ Solis Ress-u Version-

Sloan ≫ Solis 8152 Firmware Version-

Sloan ≫ Solis 8152 Version-

Sloan ≫ Solis 8195 Firmware Version-

Sloan ≫ Solis 8195 Version-

Sloan ≫ Solis 8115 Firmware Version-

Sloan ≫ Solis 8115 Version-

Sloan ≫ Solis 8110 Firmware Version-

Sloan ≫ Solis 8110 Version-

Sloan ≫ Solis 8180 Firmware Version-

Sloan ≫ Solis 8180 Version-

Sloan ≫ Solis 8113 Firmware Version-

Sloan ≫ Solis 8113 Version-

Sloan ≫ Solis 8137 Firmware Version-

Sloan ≫ Solis 8137 Version-

Sloan ≫ Solis Bpw 8000 Firmware Version-

Sloan ≫ Solis Bpw 8000 Version-

Sloan ≫ Solis 8116 Firmware Version-

Sloan ≫ Solis 8116 Version-

Sloan ≫ Solis 8111 Bt Firmware Version-

Sloan ≫ Solis 8111 Bt Version-

Sloan ≫ Solis 8153 Firmware Version-

Sloan ≫ Solis 8153 Version-

Sloan ≫ Solis 8186 Bt Firmware Version-

Sloan ≫ Solis 8186 Bt Version-

Sloan ≫ Solis Ress-c Bt Firmware Version-

Sloan ≫ Solis Ress-c Bt Version-

Sloan ≫ Solis Ress-u Bt Firmware Version-

Sloan ≫ Solis Ress-u Bt Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.07%	0.226

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.4	2.8	2.5	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
nvd@nist.gov	4.8	6.5	4.9	AV:A/AC:L/Au:N/C:P/I:P/A:N

CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

https://www.tenable.com/security/research/tra-2021-26-0

Third Party Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2021-20107

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-20107

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-20107

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-20107