Shelly Pro 4PM V2 (SPSW-104PE16EU)

From Wiki-IoT
Revision as of 19:23, 24 October 2026 by Huixin Lin (talk | contribs) (Created page with "'''PROVISIONAL CONSERVATIVE SCENARIO — NOT CONFIRMED DEVICE DEFECTS.''' Unknown items use the upper-bound score by submitter request. The letter grade below is temporary, su...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

PROVISIONAL CONSERVATIVE SCENARIO — NOT CONFIRMED DEVICE DEFECTS. Unknown items use the upper-bound score by submitter request. The letter grade below is temporary, subject to further evidence and administrator review.



Shelly Pro 4PM V2 (SPSW-104PE16EU)
Security Grade
   
     F
   
Calculator v
Shelly Pro 4PM V2 (SPSW-104PE16EU)
   Brand: Shelly 
   Category: Light Switch • Model / Gen: Pro 4PM V2 (EU) SPSW-104PE16EU
   Release Date:  • Status: 
   Classification Date:  • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering Very common [1] 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. Physical interfaces and recovery controls are documented.
Known vulnerabilities Very common 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. CVE-2025-11243 was researched on Pro4PM firmware 1.4.4; explicit SPSW-104PE16EU hardware matching remains to be confirmed.
Prior attacks Very common 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. No model-matched evidence of involvement in prior IoT attacks was established. Platform incidents or vulnerability demonstrations do not determine this score.
Updatability Rare [2] 🔗 Proof PROVISIONAL ASSUMPTION 2/3; candidates {1,2}. Not a demonstrated finding. The update policy does not list Pro4PM among feature-frozen devices. Security updates are documented, with staged rollout caveats.
Category Score Score: 3 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems No 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. Optional digest authentication protects selected RPC channels; documented channel exceptions prevent an unconditional full-authentication claim.
Communications No encryption [3] [4] 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. For the documented 2.0+ profile, web access uses TLS. Other enabled integrations must be checked separately.
Storage No encryption [5] [6] 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. Factory flash encryption applies only to newly produced devices. Updating an older unit alone does not establish this protection.
Category Score Score: 3 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Basic 🔗 Proof Documented capability; CRIS 2. The local RPC authentication model uses a fixed administrator identity with configurable credentials; full local multi-role accounts are not established.
Authentication Absent [7] [8] 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. Authentication differs across legacy and 2.0+ firmware; local recovery still matters.
Brute-force protection Absent [9] [10] [11] 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. The 2.0+ policy documents login backoff and lockout. The installed version is unknown.
Event logging Absent 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. Configurable diagnostic log streams exist but are disabled by default and use limited buffering. Complete access-event auditing is not established.
Passwords Default/Common/Easy to guess [12] 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. The 2.0+ setup window includes administrator configuration; mandatory complexity is not established.
Category Score Score: 3 / 3

Technical Specifications

Property Details
Operating System & App Shelly Gen2+ embedded firmware (version not fixed) (Companion App: Shelly Smart Control)
Hardware (CPU / GPU) CPU: ESP32-D0WDQ6 • GPU:
Memory & Storage Memory: • Storage: 8 MB flash
Power, Battery & Charging Battery: Externally powered; no operating battery specified (RTC backup not assessed) • Power: 110–240 V AC input; consumption <4 W; relay limit 16 A/channel, 40 A total (load ratings) • Charging: Not applicable to normal external-power operation
Display & Camera Display: Color LCD with local buttons • Camera:
Sound & Connectivity Sound: • Connectivity: RJ45 Ethernet; 2.4 GHz 802.11b/g/n; Bluetooth4.2; 4 relay channels and 4 switch inputs
Physical (Dimensions & Mass) Dimensions: 96 × 53 × 59 mm (H×W×D) • Mass:


Provisional assessment — not administrator approved

Conservative provisional rating: F; GRAS 9/9.

This is an explicitly assumed upper-bound document-review scenario, not a confirmed dangerousness finding or an administrator-approved classification. On 25 October 2026 the submitter authorized selecting the highest evidence-consistent candidate score for each criterion. A completely unknown item is temporarily scored 3. The selected labels such as Very common, No encryption, No authentication or Absent do NOT establish that those conditions were observed. Unknown is not evidence of absence.

No physical device, installed firmware or actual configuration was inspected. Missing optional hardware parameters remain blank. Administrator-only classification date and calculator-version fields have not been set. The official classification may remain blank until administrator approval.

Scope

EU V2型号SPSW-104PE16EU;区分V1 SPSW-004PE16EU及UL款。

Calculation

Using the published methodology: ceil(mean of Device 4 criteria)) + ceil(mean of System 3 criteria)) + ceil(mean of User 5 criteria)).

  • Device CATS: 3
  • System CATS: 3
  • User CATS: 3
  • GRAS: 9; provisional grade: F
  • Evidence-consistent outer range before selecting the conservative scenario: 4–9, candidate grades A / A- / B / C / D / F. This is an uncertainty envelope, not a statistical confidence interval.

Criterion assumptions and evidence gaps

Criterion Selected CRIS Candidate scores Basis
device_known_hardware_tampering 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.
device_known_vulnerabilties 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.
device_prior_attacks 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.
device_updatability 2 {1, 2} Upper-bound assumption; not a demonstrated defect.
system_authentication_with_other_systems 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.
system_communications 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.
system_storage 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.
user_authentication_account_management 2 {2} Documented capability under cited scope.
user_authentication_authentication 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.
user_authentication_brute_force_protection 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.
user_authentication_event_logging 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.
user_authentication_passwords 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.

Hardware and date limitations

  • parent_company: Not established; left blank. 未把品牌所有者、制造商或历史投资人直接等同为母公司;可选字段可暂留空
  • release_date: Not established; left blank. V2具体首发日未证实;不使用V1或合规文件签署日
  • type: Light Switch 暂用已有Light Switch大类;正文注明DIN四通道继电器;可进一步核对分类管理员惯例
  • status: Not established; left blank. 产品页存在不充分证明指定硬件版本仍在售;销售状态可选,待地区/修订状态确认
  • mass: Not established; left blank. 型号文档未确认设备净重;不填包装重量
  • operating_system: Shelly Gen2+ embedded firmware (version not fixed) 不是把API文档Version1.0当固件版本
  • gpu: Not established; left blank. 型号资料未明确GPU型号;不以没有外接显示输出推断没有GPU
  • memory: Not established; left blank. 未取得型号匹配的官方RAM容量;不挪用SoC理论最大值
  • battery: Externally powered; no operating battery specified (RTC backup not assessed) 只描述工作供电方式;不据此断言主板完全没有备份电池
  • charging: Not applicable to normal external-power operation 这是有线供电设备的工作充电字段;不涉及给手机充电或PoE输出
  • camera: Not established; left blank. 型号手册未明确该硬件;留空而非无证据写None
  • sound: Not established; left blank. 型号手册未明确该硬件;留空而非无证据写None

Basic and hardware sources

Review status

Document review date: 2026-10-25 (Asia/Shanghai). Provisional scenario requested by the submitter. The numerical calculation above is not a claim of administrator approval. The page must be read back after saving; any CAPTCHA, database error, moderation queue, or missing official grade remains an outstanding submission step.