Shelly

shelly

3 CVEs • 4 products

Products (4)

Click to collapse

Toggle

Pro 4pm Firmware

pro_4pm_firmware

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-42144 1Shelly 1Trv Firmware Jun 17, 2026 Jan 23, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Cleartext Transmission during initial setup in Shelly TRV 20220811-15234 v.2.1.8 allows a local attacker to obtain the Wi-Fi password.
CVE-2023-42143 1Shelly 1Trv Firmware Jun 17, 2026 Jan 23, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Missing Integrity Check in Shelly TRV 20220811-152343/v2.1.8@5afc928c allows malicious users to create a backdoor by redirecting the device to an attacker-controlled machine which serves the manipulated firmware file. Th...Show more Missing Integrity Check in Shelly TRV 20220811-152343/v2.1.8@5afc928c allows malicious users to create a backdoor by redirecting the device to an attacker-controlled machine which serves the manipulated firmware file. The device is updated with the manipulated firmware.Show less
CVE-2023-33383 1Shelly 1Pro 4pm Firmware Jun 17, 2026 Aug 2, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload.