CNNVD-202511-2244 Information

CNNVD ID

CNNVD-202511-2244

CVE-2025-11243

  • CNNVD Published: 2025-11-19

Description (Chinese)

Shelly Pro 4PM是美国Shelly公司的一款能量监测设备。 Shelly Pro 4PM 1.6之前版本存在安全漏洞,该漏洞源于资源分配无限制,可能导致过度分配。

Description (English)

Shelly Pro 4PM is an energy monitoring device for Shelly, United States. There was a security gap in the previous version of Shelly Pro 4PM 1.6, which stemmed from unrestricted resource allocation and could lead to overallocation.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Shelly

Published

2025-11-19

Last Modified

2026-02-24

References

https://www.nozominetworks.com/blog/shelly-pro-4pm-vulnerabilities https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-11243

Patch

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-11243

Share on: