CVE-2023-42144
Published Jan 23, 2024Cleartext Transmission during initial setup in Shelly TRV 20220811-15234 v.2.1.8 allows a local attacker to obtain the Wi-Fi password.
Vendor archive
shelly CVEs
Beta · best-effort3 CVEs tagged to vendor shelly — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2023-42143
Published Jan 23, 2024Missing Integrity Check in Shelly TRV 20220811-152343/v2.1.8@5afc928c allows malicious users to create a backdoor by redirecting the device to an attacker-controlled machine which…
CVE-2023-33383
Published Aug 2, 2023Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload.
Showing 1-3 of 3 CVEsPage 1 of 1