Vulnerabilities

TI-2025-10296 CVE-2025-11243 · GHSA-8vv4-79fv-vwc4

Allocation of Resources Without Limits or Throttling in Shelly Pro 4PM

LOW 36

Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM (before v1.6) allows Excessive Allocation via network.

CVSS 4.0HIGH 8.3 Adjacent network No auth No interaction EPSS 0.00426 Published 2025-11-19 Fixed in 1.6 CWE-770

TI-2025-11054 CVE-2025-12056 · GHSA-2qmw-g869-r668

Out-of-bounds read in Shelly Pro 3EM

LOW 35

Out-of-bounds Read in Shelly Pro 3EM (before v1.4.4) allows Overread Buffers.

CVSS 4.0HIGH 8.3 Adjacent network No auth No interaction EPSS 0.00193 Published 2025-11-19 No fix listed CWE-125

TI-2023-22508 CVE-2023-42144 · GHSA-h5vq-7cj5-594m

Cleartext Transmission during initial setup in Shelly TRV 20220811-15234 v.2.1.8 allows a…

LOW 24

Cleartext Transmission during initial setup in Shelly TRV 20220811-15234 v.2.1.8 allows a local attacker to obtain the Wi-Fi password.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00108 Published 2024-01-23 No fix listed CWE-319

TI-2023-22507 CVE-2023-42143 · GHSA-4q7q-6wxm-5v68

Missing Integrity Check in Shelly TRV 20220811-152343/v2.1.8@5afc928c allows malicious…

LOW 23

Missing Integrity Check in Shelly TRV 20220811-152343/v2.1.8@5afc928c allows malicious users to create a backdoor by redirecting the device to an attacker-controlled machine which serves the manipulated firmware file.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00155 Published 2024-01-23 No fix listed CWE-354

TI-2023-16519 CVE-2023-33383 · GHSA-hv53-fjh7-mp68

Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out…

MEDIUM 63

Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04726 Published 2023-08-02 No fix listed CWE-125