Description
Out-of-bounds Read in Shelly Pro 3EM (before v1.4.4) allows Overread Buffers.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Shelly | Pro 3EM | ≤ 1.4.4 | — |
Advisories 1
- ICSA-25-322-03 Shelly Pro 3EM CISA ICS & IT advisories · Nov 18, 2025
References
- https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-12056 third-party-advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-03 government-resource technical-description