CVE-2025-11243

Description

Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM (before v1.6) allows Excessive Allocation via network.

Affected Platforms

Weakness Type

CWE-770

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-02
• https://www.nozominetworks.com/blog/shelly-pro-4pm-vulnerabilities
• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-11243