CVE-2025-11243
HIGHShelly Pro 4PM < 1.6 - Denial of Service via Excessive Resource Allocation
Title source: llmDescription
Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM (before v1.6) allows Excessive Allocation via network.
References (3)
Core 3
Core References
Various Sources third-party-advisory
https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-11243
Various Sources media-coverage
technical-description
https://www.nozominetworks.com/blog/shelly-pro-4pm-vulnerabilities
Third Party Advisory, US Government Resource government-resource
technical-description
https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-02
Scores
CVSS v4
8.3
EPSS
0.0037
EPSS Percentile
29.1%
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-770
Status
published
Products (1)
Shelly/Pro 4PM
< 1.6
Published
Nov 19, 2025
Tracked Since
Feb 18, 2026