CVE-2025-11243CWE-770denial-of-service

CVE-2025-11243

published November 19, 2025

CVSS
8.3
EPSS
0%
Percentile
35.8
In the wild
Unconfirmed
What it is

Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM (before v1.6) allows Excessive Allocation via network.

The record
Technical detail
CVSS
8.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00426 · 35.8th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-11-19T12:15Z
References (3)
https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-02 · [email protected]https://www.nozominetworks.com/blog/shelly-pro-4pm-vulnerabilities · [email protected]https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-11243 · [email protected]
EPSS history
Timeline
  • 19 NOV 06:50Z
    Allocation of Resources Without Limits or Throttling in Shelly Pro 4PM
    cvelistv5