The LIXIL Corporation My SATIS Genius Toilet application for Android has a hardcoded Bluetooth PIN, which allows physically proximate…

Description

The LIXIL Corporation My SATIS Genius Toilet application for Android has a hardcoded Bluetooth PIN, which allows physically proximate attackers to trigger physical resource consumption (water or heat) or user discomfort.

Scores

EPSS (exploitation in 30 days)

1.00% · top 37% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 3.3.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (6)

• https://www.trustwave.com/spiderlabs/advisories/TWSL2013-020.txt (opens in a new tab)x_refsource_MISCx_transferred
• 20130801 TWSL2013-020: Hard-Coded Bluetooth PIN Vulnerability in LIXIL Satis Toilet (opens in a new tab)mailing-listx_refsource_FULLDISCx_transferred
• http://www.independent.co.uk/life-style/gadgets-and-tech/features/now-even-toilets-arent-safe-from-hacking-8747232.html (opens in a new tab)x_refsource_MISCx_transferred
• http://packetstormsecurity.com/files/122655/LIXIL-Satis-Toilet-Hard-Coded-Bluetooth-PIN.html (opens in a new tab)x_refsource_MISCx_transferred
• http://arstechnica.com/security/2013/08/holy-sht-smart-toilet-hack-attack/ (opens in a new tab)x_refsource_MISCx_transferred
• http://www.huffingtonpost.co.uk/2013/08/05/smart-toilet-could-attackmy-satis_n_3706116.html (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2013-4866](https://trackcve.app/badge/CVE-2013-4866.svg)](https://trackcve.app/cve/CVE-2013-4866)

Record last updated 6 Aug 2024, 16:59 UTC.