PT-2025-47441 · Shelly · Shelly Pro 3Em

Published 2025-11-19 · Updated 2025-11-21 · CVE-2025-12056

Positive Technologies · (AI Summary)

CVSS v4.0

8.3

High

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Name of the Vulnerable Software and Affected Versions Shelly Pro 3EM versions prior to 1.4.4

Description An out-of-bounds read issue exists in Shelly Pro 3EM. This allows for overread buffers.

Recommendations Update Shelly Pro 3EM to version 1.4.4 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-12056

Affected Products

Shelly Pro 3Em

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-12056 · Security Note
• https://nozominetworks.com/labs/vulnerability-advisories-cve-2025-12056 · Note
• https://t.me/CVEtracker/37723 · Telegram Post
• https://twitter.com/CVEnew/status/1991042904165318661 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-322-03 · Note
• https://t.me/cveNotify/143309 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1991058809486221545 · Twitter Post
• https://t.me/cveNotify/143630 · Telegram Post