BaseFortify

Publication date: 2025-11-19

Last updated on: 2025-11-21

Assigner: Nozomi Networks Inc.

Description

Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM (before v1.6) allows Excessive Allocation via network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-19

Last Modified

2025-11-21

Generated

2026-07-07

AI Q&A

2025-11-19

EPSS Evaluated

2026-07-06

NVD

CVE-2025-11243

Affected Vendors & Products

Vendor	Product	Version / Range
shelly	shelly_pro_4pm	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

This vulnerability is an Allocation of Resources Without Limits or Throttling issue in the Shelly Pro 4PM device (before version 1.6). It allows an attacker to cause excessive allocation of resources via the network, potentially leading to resource exhaustion.

Impact Analysis

The vulnerability can impact you by allowing an attacker to consume excessive resources on the Shelly Pro 4PM device, which may lead to degraded performance, denial of service, or device unavailability.

Hi! I’m here to help you understand CVE-2025-11243. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70