CVE-2025-11243

Summary

Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM (before v1.6) allows Excessive Allocation via network.

Affected Software

Weaknesses

• CWE-770: CWE-770 Allocation of Resources Without Limits or Throttling

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-11243
• https://www.nozominetworks.com/blog/shelly-pro-4pm-vulnerabilities
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-02

• ←Previous
• Next→