Shelly

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Shelly records in CISA KEV

No Shelly vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Trv Firmware 2 records LOW Pro 4pm Firmware 1 record MEDIUM

Records

2 records in Trv Firmware · all components

TI-2023-22508 CVE-2023-42144 · GHSA-h5vq-7cj5-594m

Cleartext Transmission during initial setup in Shelly TRV 20220811-15234 v.2.1.8 allows a…

LOW 24

Cleartext Transmission during initial setup in Shelly TRV 20220811-15234 v.2.1.8 allows a local attacker to obtain the Wi-Fi password.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00108 Published 2024-01-23 No fix listed CWE-319

TI-2023-22507 CVE-2023-42143 · GHSA-4q7q-6wxm-5v68

Missing Integrity Check in Shelly TRV 20220811-152343/v2.1.8@5afc928c allows malicious…

LOW 23

Missing Integrity Check in Shelly TRV 20220811-152343/v2.1.8@5afc928c allows malicious users to create a backdoor by redirecting the device to an attacker-controlled machine which serves the manipulated firmware file.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00155 Published 2024-01-23 No fix listed CWE-354

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0