Shelly Pro 3EM Out-of-Bounds Read Vulnerability Allowing Denial-of-Service

A vulnerability allowing an out-of-bounds read has been identified in the Shelly Pro 3EM smart device, affecting versions prior to 1.4.4. This vulnerability allows for buffer over-read, which can be exploited to cause an arbitrary reboot of the device, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability allows an unauthenticated attacker to arbitrarily reboot the device, causing a denial-of-service condition.

Remediation

It is recommended to segregate the device in a dedicated and protected network until a software patch is released.