Resource exhaustion in Shelly Pro 4pm
CVE-2025-11243
Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM (before v1.6) allows Excessive Allocation via network.
EPSS: 0.004 (31.5th percentile) — read the EPSS interpretation.
Affected products
- Shelly Pro 4pm — versions 0
Weakness classification (CWE)
References
- prodsec@nozominetworks.com (third-party-advisory)
- prodsec@nozominetworks.com (technical-description, media-coverage)
- prodsec@nozominetworks.com (technical-description, government-resource)