Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2021-20107 Details

Description

There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS. The vulnerability allows for unauthenticated kinetic effects and information disclosure on the faucets. It is possible to use the Bluetooth Low Energy (BLE) connectivity to read and write to many BLE characteristics on the device. Some of these control the flow of water, the sensitivity of the sensors, and information about maintenance.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.4 MEDIUMVector:CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.tenable.com/security/research/tra-2021-26-0	CVE	ExploitThird Party Advisory
https://www.tenable.com/security/research/tra-2021-26-0	[email protected]	ExploitThird Party Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-306	Missing Authentication for Critical Function	[email protected]

Affected Products

Product	Versions
sloan optima eaf-100 firmware	All versions
CPE cpe:2.3:o:sloan:optima_eaf-100_firmware:-:::::::* Remediation No remediation found in references.
sloan optima eaf-100	All versions
CPE cpe:2.3:h:sloan:optima_eaf-100:-:::::::* Remediation No remediation found in references.
sloan optima eaf-150 firmware	All versions
CPE cpe:2.3:o:sloan:optima_eaf-150_firmware:-:::::::* Remediation No remediation found in references.
sloan optima eaf-150	All versions
CPE cpe:2.3:h:sloan:optima_eaf-150:-:::::::* Remediation No remediation found in references.
sloan optima eaf-200 firmware	All versions
CPE cpe:2.3:o:sloan:optima_eaf-200_firmware:-:::::::* Remediation No remediation found in references.
sloan optima eaf-200	All versions
CPE cpe:2.3:h:sloan:optima_eaf-200:-:::::::* Remediation No remediation found in references.
sloan optima eaf-225 firmware	All versions
CPE cpe:2.3:o:sloan:optima_eaf-225_firmware:-:::::::* Remediation No remediation found in references.
sloan optima eaf-225	All versions
CPE cpe:2.3:h:sloan:optima_eaf-225:-:::::::* Remediation No remediation found in references.
sloan optima eaf-250 firmware	All versions
CPE cpe:2.3:o:sloan:optima_eaf-250_firmware:-:::::::* Remediation No remediation found in references.
sloan optima eaf-250	All versions
CPE cpe:2.3:h:sloan:optima_eaf-250:-:::::::* Remediation No remediation found in references.
sloan optima eaf-275 firmware	All versions
CPE cpe:2.3:o:sloan:optima_eaf-275_firmware:-:::::::* Remediation No remediation found in references.
sloan optima eaf-275	All versions
CPE cpe:2.3:h:sloan:optima_eaf-275:-:::::::* Remediation No remediation found in references.
sloan optima eaf-350 firmware	All versions
CPE cpe:2.3:o:sloan:optima_eaf-350_firmware:-:::::::* Remediation No remediation found in references.
sloan optima eaf-350	All versions
CPE cpe:2.3:h:sloan:optima_eaf-350:-:::::::* Remediation No remediation found in references.
sloan optima eaf-700 firmware	All versions
CPE cpe:2.3:o:sloan:optima_eaf-700_firmware:-:::::::* Remediation No remediation found in references.
sloan optima eaf-700	All versions
CPE cpe:2.3:h:sloan:optima_eaf-700:-:::::::* Remediation No remediation found in references.
sloan optima eaf-750 firmware	All versions
CPE cpe:2.3:o:sloan:optima_eaf-750_firmware:-:::::::* Remediation No remediation found in references.
sloan optima eaf-750	All versions
CPE cpe:2.3:h:sloan:optima_eaf-750:-:::::::* Remediation No remediation found in references.
sloan optima ebf-187 firmware	All versions
CPE cpe:2.3:o:sloan:optima_ebf-187_firmware:-:::::::* Remediation No remediation found in references.
sloan optima ebf-187	All versions
CPE cpe:2.3:h:sloan:optima_ebf-187:-:::::::* Remediation No remediation found in references.
sloan optima ebf-415 firmware	All versions
CPE cpe:2.3:o:sloan:optima_ebf-415_firmware:-:::::::* Remediation No remediation found in references.
sloan optima ebf-415	All versions
CPE cpe:2.3:h:sloan:optima_ebf-415:-:::::::* Remediation No remediation found in references.
sloan optima ebf-425 firmware	All versions
CPE cpe:2.3:o:sloan:optima_ebf-425_firmware:-:::::::* Remediation No remediation found in references.
sloan optima ebf-425	All versions
CPE cpe:2.3:h:sloan:optima_ebf-425:-:::::::* Remediation No remediation found in references.
sloan optima ebf-550 firmware	All versions
CPE cpe:2.3:o:sloan:optima_ebf-550_firmware:-:::::::* Remediation No remediation found in references.
sloan optima ebf-550	All versions
CPE cpe:2.3:h:sloan:optima_ebf-550:-:::::::* Remediation No remediation found in references.
sloan optima ebf-615 firmware	All versions
CPE cpe:2.3:o:sloan:optima_ebf-615_firmware:-:::::::* Remediation No remediation found in references.
sloan optima ebf-615	All versions
CPE cpe:2.3:h:sloan:optima_ebf-615:-:::::::* Remediation No remediation found in references.
sloan optima ebf-650 firmware	All versions
CPE cpe:2.3:o:sloan:optima_ebf-650_firmware:-:::::::* Remediation No remediation found in references.
sloan optima ebf-650	All versions
CPE cpe:2.3:h:sloan:optima_ebf-650:-:::::::* Remediation No remediation found in references.
sloan optima ebf-665 firmware	All versions
CPE cpe:2.3:o:sloan:optima_ebf-665_firmware:-:::::::* Remediation No remediation found in references.
sloan optima ebf-665	All versions
CPE cpe:2.3:h:sloan:optima_ebf-665:-:::::::* Remediation No remediation found in references.
sloan optima ebf-750 firmware	All versions
CPE cpe:2.3:o:sloan:optima_ebf-750_firmware:-:::::::* Remediation No remediation found in references.
sloan optima ebf-750	All versions
CPE cpe:2.3:h:sloan:optima_ebf-750:-:::::::* Remediation No remediation found in references.
sloan optima ebf-775 firmware	All versions
CPE cpe:2.3:o:sloan:optima_ebf-775_firmware:-:::::::* Remediation No remediation found in references.
sloan optima ebf-775	All versions
CPE cpe:2.3:h:sloan:optima_ebf-775:-:::::::* Remediation No remediation found in references.
sloan optima ebf-85 firmware	All versions
CPE cpe:2.3:o:sloan:optima_ebf-85_firmware:-:::::::* Remediation No remediation found in references.
sloan optima ebf-85	All versions
CPE cpe:2.3:h:sloan:optima_ebf-85:-:::::::* Remediation No remediation found in references.
sloan optima ebf-850 firmware	All versions
CPE cpe:2.3:o:sloan:optima_ebf-850_firmware:-:::::::* Remediation No remediation found in references.
sloan optima ebf-850	All versions
CPE cpe:2.3:h:sloan:optima_ebf-850:-:::::::* Remediation No remediation found in references.
sloan optima etf-610 firmware	All versions
CPE cpe:2.3:o:sloan:optima_etf-610_firmware:-:::::::* Remediation No remediation found in references.
sloan optima etf-610	All versions
CPE cpe:2.3:h:sloan:optima_etf-610:-:::::::* Remediation No remediation found in references.
sloan optima etf-600 firmware	All versions
CPE cpe:2.3:o:sloan:optima_etf-600_firmware:-:::::::* Remediation No remediation found in references.
sloan optima etf-600	All versions
CPE cpe:2.3:h:sloan:optima_etf-600:-:::::::* Remediation No remediation found in references.
sloan optima etf-410 firmware	All versions
CPE cpe:2.3:o:sloan:optima_etf-410_firmware:-:::::::* Remediation No remediation found in references.
sloan optima etf-410	All versions
CPE cpe:2.3:h:sloan:optima_etf-410:-:::::::* Remediation No remediation found in references.
sloan optima etf-420 firmware	All versions
CPE cpe:2.3:o:sloan:optima_etf-420_firmware:-:::::::* Remediation No remediation found in references.
sloan optima etf-420	All versions
CPE cpe:2.3:h:sloan:optima_etf-420:-:::::::* Remediation No remediation found in references.
sloan optima etf-500 firmware	All versions
CPE cpe:2.3:o:sloan:optima_etf-500_firmware:-:::::::* Remediation No remediation found in references.
sloan optima etf-500	All versions
CPE cpe:2.3:h:sloan:optima_etf-500:-:::::::* Remediation No remediation found in references.
sloan optima etf-660 firmware	All versions
CPE cpe:2.3:o:sloan:optima_etf-660_firmware:-:::::::* Remediation No remediation found in references.
sloan optima etf-660	All versions
CPE cpe:2.3:h:sloan:optima_etf-660:-:::::::* Remediation No remediation found in references.
sloan optima etf-700 firmware	All versions
CPE cpe:2.3:o:sloan:optima_etf-700_firmware:-:::::::* Remediation No remediation found in references.
sloan optima etf-700	All versions
CPE cpe:2.3:h:sloan:optima_etf-700:-:::::::* Remediation No remediation found in references.
sloan optima etf-770 firmware	All versions
CPE cpe:2.3:o:sloan:optima_etf-770_firmware:-:::::::* Remediation No remediation found in references.
sloan optima etf-770	All versions
CPE cpe:2.3:h:sloan:optima_etf-770:-:::::::* Remediation No remediation found in references.
sloan optima etf-80 firmware	All versions
CPE cpe:2.3:o:sloan:optima_etf-80_firmware:-:::::::* Remediation No remediation found in references.
sloan optima etf-80	All versions
CPE cpe:2.3:h:sloan:optima_etf-80:-:::::::* Remediation No remediation found in references.
sloan optima etf-800 firmware	All versions
CPE cpe:2.3:o:sloan:optima_etf-800_firmware:-:::::::* Remediation No remediation found in references.
sloan optima etf-800	All versions
CPE cpe:2.3:h:sloan:optima_etf-800:-:::::::* Remediation No remediation found in references.
sloan optima etf-880 firmware	All versions
CPE cpe:2.3:o:sloan:optima_etf-880_firmware:-:::::::* Remediation No remediation found in references.
sloan optima etf-880	All versions
CPE cpe:2.3:h:sloan:optima_etf-880:-:::::::* Remediation No remediation found in references.
sloan basys efx-300 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-300_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-300	All versions
CPE cpe:2.3:h:sloan:basys_efx-300:-:::::::* Remediation No remediation found in references.
sloan basys efx-350 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-350_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-350	All versions
CPE cpe:2.3:h:sloan:basys_efx-350:-:::::::* Remediation No remediation found in references.
sloan basys efx-375 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-375_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-375	All versions
CPE cpe:2.3:h:sloan:basys_efx-375:-:::::::* Remediation No remediation found in references.
sloan basys efx-377 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-377_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-377	All versions
CPE cpe:2.3:h:sloan:basys_efx-377:-:::::::* Remediation No remediation found in references.
sloan basys efx-380 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-380_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-380	All versions
CPE cpe:2.3:h:sloan:basys_efx-380:-:::::::* Remediation No remediation found in references.
sloan basys efx-600 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-600_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-600	All versions
CPE cpe:2.3:h:sloan:basys_efx-600:-:::::::* Remediation No remediation found in references.
sloan basys efx-650 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-650_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-650	All versions
CPE cpe:2.3:h:sloan:basys_efx-650:-:::::::* Remediation No remediation found in references.
sloan basys efx-675 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-675_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-675	All versions
CPE cpe:2.3:h:sloan:basys_efx-675:-:::::::* Remediation No remediation found in references.
sloan basys efx-677 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-677_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-677	All versions
CPE cpe:2.3:h:sloan:basys_efx-677:-:::::::* Remediation No remediation found in references.
sloan basys efx-680 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-680_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-680	All versions
CPE cpe:2.3:h:sloan:basys_efx-680:-:::::::* Remediation No remediation found in references.
sloan basys efx-200 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-200_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-200	All versions
CPE cpe:2.3:h:sloan:basys_efx-200:-:::::::* Remediation No remediation found in references.
sloan basys efx-250 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-250_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-250	All versions
CPE cpe:2.3:h:sloan:basys_efx-250:-:::::::* Remediation No remediation found in references.
sloan basys efx-275 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-275_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-275	All versions
CPE cpe:2.3:h:sloan:basys_efx-275:-:::::::* Remediation No remediation found in references.
sloan basys efx-277 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-277_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-277	All versions
CPE cpe:2.3:h:sloan:basys_efx-277:-:::::::* Remediation No remediation found in references.
sloan basys efx-280 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-280_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-280	All versions
CPE cpe:2.3:h:sloan:basys_efx-280:-:::::::* Remediation No remediation found in references.
sloan basys efx-100 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-100_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-100	All versions
CPE cpe:2.3:h:sloan:basys_efx-100:-:::::::* Remediation No remediation found in references.
sloan basys efx-150 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-150_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-150	All versions
CPE cpe:2.3:h:sloan:basys_efx-150:-:::::::* Remediation No remediation found in references.
sloan basys efx-175 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-175_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-175	All versions
CPE cpe:2.3:h:sloan:basys_efx-175:-:::::::* Remediation No remediation found in references.
sloan basys efx-177 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-177_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-177	All versions
CPE cpe:2.3:h:sloan:basys_efx-177:-:::::::* Remediation No remediation found in references.
sloan basys efx-180 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-180_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-180	All versions
CPE cpe:2.3:h:sloan:basys_efx-180:-:::::::* Remediation No remediation found in references.
sloan basys efx-800 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-800_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-800	All versions
CPE cpe:2.3:h:sloan:basys_efx-800:-:::::::* Remediation No remediation found in references.
sloan basys efx-850 firmware	All versions
CPE cpe:2.3:o:sloan:basys_efx-850_firmware:-:::::::* Remediation No remediation found in references.
sloan basys efx-850	All versions
CPE cpe:2.3:h:sloan:basys_efx-850:-:::::::* Remediation No remediation found in references.
sloan solis 8111 firmware	All versions
CPE cpe:2.3:o:sloan:solis_8111_firmware:-:::::::* Remediation No remediation found in references.
sloan solis 8111	All versions
CPE cpe:2.3:h:sloan:solis_8111:-:::::::* Remediation No remediation found in references.
sloan solis 8186 firmware	All versions
CPE cpe:2.3:o:sloan:solis_8186_firmware:-:::::::* Remediation No remediation found in references.
sloan solis 8186	All versions
CPE cpe:2.3:h:sloan:solis_8186:-:::::::* Remediation No remediation found in references.
sloan solis ress-c firmware	All versions
CPE cpe:2.3:o:sloan:solis_ress-c_firmware:-:::::::* Remediation No remediation found in references.
sloan solis ress-c	All versions
CPE cpe:2.3:h:sloan:solis_ress-c:-:::::::* Remediation No remediation found in references.
sloan solis ress-u firmware	All versions
CPE cpe:2.3:o:sloan:solis_ress-u_firmware:-:::::::* Remediation No remediation found in references.
sloan solis ress-u	All versions
CPE cpe:2.3:h:sloan:solis_ress-u:-:::::::* Remediation No remediation found in references.
sloan solis 8152 firmware	All versions
CPE cpe:2.3:o:sloan:solis_8152_firmware:-:::::::* Remediation No remediation found in references.
sloan solis 8152	All versions
CPE cpe:2.3:h:sloan:solis_8152:-:::::::* Remediation No remediation found in references.
sloan solis 8195 firmware	All versions
CPE cpe:2.3:o:sloan:solis_8195_firmware:-:::::::* Remediation No remediation found in references.
sloan solis 8195	All versions
CPE cpe:2.3:h:sloan:solis_8195:-:::::::* Remediation No remediation found in references.
sloan solis 8115 firmware	All versions
CPE cpe:2.3:o:sloan:solis_8115_firmware:-:::::::* Remediation No remediation found in references.
sloan solis 8115	All versions
CPE cpe:2.3:h:sloan:solis_8115:-:::::::* Remediation No remediation found in references.
sloan solis 8110 firmware	All versions
CPE cpe:2.3:o:sloan:solis_8110_firmware:-:::::::* Remediation No remediation found in references.
sloan solis 8110	All versions
CPE cpe:2.3:h:sloan:solis_8110:-:::::::* Remediation No remediation found in references.
sloan solis 8180 firmware	All versions
CPE cpe:2.3:o:sloan:solis_8180_firmware:-:::::::* Remediation No remediation found in references.
sloan solis 8180	All versions
CPE cpe:2.3:h:sloan:solis_8180:-:::::::* Remediation No remediation found in references.
sloan solis 8113 firmware	All versions
CPE cpe:2.3:o:sloan:solis_8113_firmware:-:::::::* Remediation No remediation found in references.
sloan solis 8113	All versions
CPE cpe:2.3:h:sloan:solis_8113:-:::::::* Remediation No remediation found in references.
sloan solis 8137 firmware	All versions
CPE cpe:2.3:o:sloan:solis_8137_firmware:-:::::::* Remediation No remediation found in references.
sloan solis 8137	All versions
CPE cpe:2.3:h:sloan:solis_8137:-:::::::* Remediation No remediation found in references.
sloan solis bpw 8000 firmware	All versions
CPE cpe:2.3:o:sloan:solis_bpw_8000_firmware:-:::::::* Remediation No remediation found in references.
sloan solis bpw 8000	All versions
CPE cpe:2.3:h:sloan:solis_bpw_8000:-:::::::* Remediation No remediation found in references.
sloan solis 8116 firmware	All versions
CPE cpe:2.3:o:sloan:solis_8116_firmware:-:::::::* Remediation No remediation found in references.
sloan solis 8116	All versions
CPE cpe:2.3:h:sloan:solis_8116:-:::::::* Remediation No remediation found in references.
sloan solis 8111 bt firmware	All versions
CPE cpe:2.3:o:sloan:solis_8111_bt_firmware:-:::::::* Remediation No remediation found in references.
sloan solis 8111 bt	All versions
CPE cpe:2.3:h:sloan:solis_8111_bt:-:::::::* Remediation No remediation found in references.
sloan solis 8153 firmware	All versions
CPE cpe:2.3:o:sloan:solis_8153_firmware:-:::::::* Remediation No remediation found in references.
sloan solis 8153	All versions
CPE cpe:2.3:h:sloan:solis_8153:-:::::::* Remediation No remediation found in references.
sloan solis 8186 bt firmware	All versions
CPE cpe:2.3:o:sloan:solis_8186_bt_firmware:-:::::::* Remediation No remediation found in references.
sloan solis 8186 bt	All versions
CPE cpe:2.3:h:sloan:solis_8186_bt:-:::::::* Remediation No remediation found in references.
sloan solis ress-c bt firmware	All versions
CPE cpe:2.3:o:sloan:solis_ress-c_bt_firmware:-:::::::* Remediation No remediation found in references.
sloan solis ress-c bt	All versions
CPE cpe:2.3:h:sloan:solis_ress-c_bt:-:::::::* Remediation No remediation found in references.
sloan solis ress-u bt firmware	All versions
CPE cpe:2.3:o:sloan:solis_ress-u_bt_firmware:-:::::::* Remediation No remediation found in references.
sloan solis ress-u bt	All versions
CPE cpe:2.3:h:sloan:solis_ress-u_bt:-:::::::* Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Jun 28, 2022	CWE Remap	[email protected]
Jul 8, 2021	Initial Analysis	[email protected]

CVE-2021-20107 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation