Auth bypass in Sloan Basys Efx-100
CVE-2021-20107
There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS. The vulnerability allows for unauthenticated kinetic effects and information disclosure on the faucets. It is possible to use the Bluetooth Low Energy (BLE) connectivity to read and write to many BLE characteristics on the device. Some of these control the flow of water, the sensitivity of the sensors, and information about maintenance.
Vulnerability class: Broken Authentication
EPSS: 0.005 (43.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.
Affected products
Weakness classification (CWE)
References
- vulnreport@tenable.com (Exploit, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-20107?
- CVE-2021-20107 is a medium-severity vulnerability in Sloan Basys Efx-100, classified under Missing Authentication for Critical Function. CVSS score: 5.4/10. Published 2021-06-30.
- How severe is CVE-2021-20107?
- Medium severity. CVSS v3 base score is 5.4 out of 10.