High · 8.3 CVE-2025-11243 EUVD-2025-198137GHSA-8vv4-79fv-vwc4

Allocation of Resources Without Limits or Throttling in Shelly Pro 4PM

Published Nov 19, 2025 · Updated Nov 21, 2025 · Assigned by Nozomi

Vendor: Shelly Product: Pro 4PM

Description

Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM (before v1.6) allows Excessive Allocation via network.

Affected products

Vendor	Product	Affected	Fixed
Shelly	Pro 4PM	< 1.6	1.6

Advisories 1

ICSA-25-322-02 Shelly Pro 4PM CISA ICS & IT advisories · Nov 18, 2025

References

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-11243 third-party-advisory
https://www.nozominetworks.com/blog/shelly-pro-4pm-vulnerabilities media-coverage technical-description
https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-02 government-resource technical-description