BaseFortify

Publication date: 2025-11-19

Last updated on: 2025-11-21

Assigner: Nozomi Networks Inc.

Description

Out-of-bounds Read in Shelly Pro 3EM (before v1.4.4) allows Overread Buffers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-19

Last Modified

2025-11-21

Generated

2026-07-06

AI Q&A

2025-11-19

EPSS Evaluated

2026-07-05

NVD

CVE-2025-12056

Affected Vendors & Products

Vendor	Product	Version / Range
shelly	shelly_pro	1.4.4

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an Out-of-bounds Read in Shelly Pro 3EM devices before version 1.4.4, which allows the device to read data beyond the intended buffer limits, potentially leading to information disclosure or system instability.

Impact Analysis

The impact of this vulnerability could include unauthorized access to sensitive information due to buffer overread, potential system crashes, or other unpredictable behavior in the affected Shelly Pro 3EM devices.

Hi! I’m here to help you understand CVE-2025-12056. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70