Skip to main content

CISA issues alert on Shelly Pro 4PM vulnerability causing denial of service

This is the page you're already on. The Human View toggle above shows it in full.

A green key on the record, left, is one Decision Insights added. It doesn't exist on the company's site or in a wire feed. The same key labels its row on the right, so you can match them directly. More on how DI enriches a record.

The record

This is what the machine sees: the exact JSON-LD an agent receives for this listing.

BlogPosting
{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/cisa-issues-alert-on-shelly-pro-4pm-vulnerability-causing-denial-of-service/#blogposting",
  "@type": "BlogPosting",
  "about": {
    "@type": "Organization",
    "name": "Shelly and Sands"
  },
  "articleSection": [
    "Cybersecurity",
    "AI infrastructure"
  ],
  "audience": [
    {
      "@type": "Audience",
      "additionalType": "Persona",
      "audienceType": "Security Operations Leader"
    },
    {
      "@type": "Audience",
      "additionalType": "Adoption curve",
      "audienceType": "Early Majority"
    },
    {
      "@type": "Audience",
      "additionalType": "Industry",
      "audienceType": "Industrials / Capital Goods / Electrical Equipment / Electrical"
    }
  ],
  "author": {
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "name": "Decision Insights Threat Desk",
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  },
  "dateModified": "2026-08-23T13:18:21-06:00",
  "datePublished": "2025-11-25T13:18:39-07:00",
  "description": "Shelly Pro 4PM devices before version 1.6 have a resource allocation vulnerability causing denial of service; updating firmware mitigates the issue.",
  "headline": "CISA issues alert on Shelly Pro 4PM vulnerability causing denial of service",
  "isBasedOn": {
    "@type": "CreativeWork",
    "author": {
      "@type": "Person",
      "name": "CISA"
    },
    "sourceOrganization": {
      "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
      "name": "Department of Homeland Security"
    },
    "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-02"
  },
  "keywords": [
    "Common Vulnerability Scoring System",
    "Denial of Service",
    "Firmware",
    "JSON",
    "Vulnerabilities"
  ],
  "mainEntityOfPage": {
    "@id": "https://decisioninsights.ai/cisa-issues-alert-on-shelly-pro-4pm-vulnerability-causing-denial-of-service/",
    "@type": "WebPage",
    "sdDatePublished": "2026-08-23",
    "sdPublisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  "mentions": [
    {
      "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
      "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
    }
  ],
  "publisher": {
    "@id": "https://decisioninsights.ai/#organization"
  }
}
WebSite
{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/#website",
  "@type": "WebSite",
  "name": "Decision Insights",
  "potentialAction": {
    "@type": "SearchAction",
    "target": {
      "@type": "EntryPoint",
      "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}\u0026submit=1"
    }
  },
  "publisher": {
    "@id": "https://decisioninsights.ai/#organization"
  },
  "url": "https://decisioninsights.ai"
}
Organization
{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/#organization",
  "@type": "Organization",
  "contactPoint": {
    "@type": "ContactPoint",
    "contactType": "customer support",
    "email": "[email protected]"
  },
  "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
  "logo": {
    "@type": "ImageObject",
    "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
  },
  "name": "Decision Insights",
  "parentOrganization": {
    "@type": "Organization",
    "name": "Wiretap Labs",
    "sameAs": [
      "https://www.linkedin.com/company/wiretap-labs",
      "https://www.crunchbase.com/organization/wiretap-labs"
    ],
    "url": "https://wiretaplabs.com"
  },
  "publishingPrinciples": "https://decisioninsights.ai/standards/",
  "sameAs": [
    "https://www.linkedin.com/company/decisioninsights"
  ],
  "url": "https://decisioninsights.ai"
}
BreadcrumbList
{
  "@context": "https://schema.org",
  "@type": "BreadcrumbList",
  "itemListElement": [
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai",
      "name": "Decision Insights",
      "position": 1
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/records/",
      "name": "Records",
      "position": 2
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/cisa-issues-alert-on-shelly-pro-4pm-vulnerability-causing-denial-of-service/",
      "name": "CISA issues alert on Shelly Pro 4PM vulnerability causing denial of service",
      "position": 3
    }
  ]
}
Person
{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
  "@type": "Person",
  "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards \u0026 Methodology.",
  "name": "Decision Insights Threat Desk",
  "sameAs": [
    "https://www.linkedin.com/showcase/decisioninsights/"
  ],
  "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
}
What we add

Audience targeting

A company states its own audience in marketing copy, if at all. This is Decision Insights' own classification of the content -- seniority, job function, buyer role, adoption curve, technology maturity and target industry -- not the publisher's self-reported audience.

Persona Security Operations Leader Adoption curve Early Majority Industry Industrials / Capital Goods / Electrical Equipment / Electrical

Subject determination

A syndication feed carries a story and every company it happens to name, with no way to tell which one the story is actually about. This is Decision Insights' own determination of this article's subject -- one company, resolved from the source feed's own assignment where one exists, our own analysis otherwise.

Shelly and Sands

Entity resolution

A wire feed names a company as a bare string, mentioned once and never resolved to anything. This is every company and project Decision Insights identified in this article, each linked to its own record with a real address, not a name an agent has to match itself.

Cybersecurity and Infrastructure Security Agency (CISA) https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/

Primary source

Our own summary carries our own byline, same as anyone else's would. This is the original work it is based on -- the source URL, its author and its publisher -- so the claim can be checked against where it actually came from, not just taken on our word.

Source https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-02 Original author CISA Source publisher Department of Homeland Security