CVE-2021-20107

Published: Jun 30, 2021Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS. The vulnerability allows for unauthenticated kinetic effects and information disclosure on the faucets. It is possible to use the Bluetooth Low Energy (BLE) connectivity to read and write to many BLE characteristics on the device. Some of these control the flow of water, the sensitivity of the sensors, and information about maintenance.

Affected (71)

Sloan

71 products

Optima Eaf 100 Firmware

Optima Eaf 150 Firmware

Optima Eaf 200 Firmware

Optima Eaf 225 Firmware

Optima Eaf 250 Firmware

Optima Eaf 275 Firmware

Optima Eaf 350 Firmware

Optima Eaf 700 Firmware

Optima Eaf 750 Firmware

Optima Ebf 187 Firmware

Optima Ebf 415 Firmware

Optima Ebf 425 Firmware

Optima Ebf 550 Firmware

Optima Ebf 615 Firmware

Optima Ebf 650 Firmware

Optima Ebf 665 Firmware

Optima Ebf 750 Firmware

Optima Ebf 775 Firmware

Optima Ebf 85 Firmware

Optima Ebf 850 Firmware

Optima Etf 610 Firmware

Optima Etf 600 Firmware

Optima Etf 410 Firmware

Optima Etf 420 Firmware

Optima Etf 500 Firmware

Optima Etf 660 Firmware

Optima Etf 700 Firmware

Optima Etf 770 Firmware

Optima Etf 80 Firmware

Optima Etf 800 Firmware

Optima Etf 880 Firmware

Basys Efx 300 Firmware

Basys Efx 350 Firmware

Basys Efx 375 Firmware

Basys Efx 377 Firmware

Basys Efx 380 Firmware

Basys Efx 600 Firmware

Basys Efx 650 Firmware

Basys Efx 675 Firmware

Basys Efx 677 Firmware

Basys Efx 680 Firmware

Basys Efx 200 Firmware

Basys Efx 250 Firmware

Basys Efx 275 Firmware

Basys Efx 277 Firmware

Basys Efx 280 Firmware

Basys Efx 100 Firmware

Basys Efx 150 Firmware

Basys Efx 175 Firmware

Basys Efx 177 Firmware

Basys Efx 180 Firmware

Basys Efx 800 Firmware

Basys Efx 850 Firmware

Solis 8111 Firmware

Solis 8186 Firmware

Solis Ress C Firmware

Solis Ress U Firmware

Solis Bpw 8000 Firmware

Solis 8116 Firmware

Solis 8111 Bt Firmware

Solis 8153 Firmware

Solis 8186 Bt Firmware

Solis Ress C Bt Firmware

Solis Ress U Bt Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Eaf 100 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Eaf 100	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Eaf 150 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Eaf 150	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Eaf 200 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Eaf 200	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Eaf 225 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Eaf 225	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Eaf 250 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Eaf 250	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Eaf 275 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Eaf 275	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Eaf 350 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Eaf 350	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Eaf 700 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Eaf 700	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Eaf 750 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Eaf 750	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Ebf 187 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Ebf 187	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Ebf 415 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Ebf 415	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Ebf 425 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Ebf 425	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Ebf 550 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Ebf 550	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Ebf 615 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Ebf 615	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Ebf 650 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Ebf 650	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Ebf 665 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Ebf 665	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Ebf 750 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Ebf 750	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Ebf 775 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Ebf 775	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Ebf 85 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Ebf 85	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Ebf 850 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Ebf 850	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Etf 610 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Etf 610	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Etf 600 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Etf 600	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Etf 410 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Etf 410	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Etf 420 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Etf 420	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Etf 500 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Etf 500	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Etf 660 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Etf 660	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Etf 700 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Etf 700	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Etf 770 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Etf 770	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Etf 80 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Etf 80	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Etf 800 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Etf 800	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Optima Etf 880 Firmware	All versions

Running on/with	Platform Versions
Sloan Optima Etf 880	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 300 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 300	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 350 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 350	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 375 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 375	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 377 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 377	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 380 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 380	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 600 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 600	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 650 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 650	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 675 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 675	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 677 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 677	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 680 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 680	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 200 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 200	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 250 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 250	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 275 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 275	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 277 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 277	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 280 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 280	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 100 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 100	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 150 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 150	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 175 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 175	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 177 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 177	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 180 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 180	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 800 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 800	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Basys Efx 850 Firmware	All versions

Running on/with	Platform Versions
Sloan Basys Efx 850	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis 8111 Firmware	All versions

Running on/with	Platform Versions
Sloan Solis 8111	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis 8186 Firmware	All versions

Running on/with	Platform Versions
Sloan Solis 8186	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis Ress C Firmware	All versions

Running on/with	Platform Versions
Sloan Solis Ress C	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis Ress U Firmware	All versions

Running on/with	Platform Versions
Sloan Solis Ress U	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis 8152 Firmware	All versions

Running on/with	Platform Versions
Sloan Solis 8152	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis 8195 Firmware	All versions

Running on/with	Platform Versions
Sloan Solis 8195	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis 8115 Firmware	All versions

Running on/with	Platform Versions
Sloan Solis 8115	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis 8110 Firmware	All versions

Running on/with	Platform Versions
Sloan Solis 8110	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis 8180 Firmware	All versions

Running on/with	Platform Versions
Sloan Solis 8180	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis 8113 Firmware	All versions

Running on/with	Platform Versions
Sloan Solis 8113	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis 8137 Firmware	All versions

Running on/with	Platform Versions
Sloan Solis 8137	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis Bpw 8000 Firmware	All versions

Running on/with	Platform Versions
Sloan Solis Bpw 8000	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis 8116 Firmware	All versions

Running on/with	Platform Versions
Sloan Solis 8116	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis 8111 Bt Firmware	All versions

Running on/with	Platform Versions
Sloan Solis 8111 Bt	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis 8153 Firmware	All versions

Running on/with	Platform Versions
Sloan Solis 8153	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis 8186 Bt Firmware	All versions

Running on/with	Platform Versions
Sloan Solis 8186 Bt	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis Ress C Bt Firmware	All versions

Running on/with	Platform Versions
Sloan Solis Ress C Bt	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sloan Solis Ress U Bt Firmware	All versions

Running on/with	Platform Versions
Sloan Solis Ress U Bt	All versions

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

https://www.tenable.com/security/research/tra-2021-26-0

Source: vulnreport@tenable.com

ExploitThird Party Advisory

https://www.tenable.com/security/research/tra-2021-26-0

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.