You do not have permission to edit this page, for the following reasons:
Reasoning: Shelly devices are designed around local-first control with no mandatory cloud dependency, which removes a large class of consumer-IoT risk: pairing requires setting a device password and cloud tokens are per-device. The CVE record for the Shelly ecosystem is small and no Plug S specific issue was found, but the platform also enforces no MFA and has almost no authentication logging. Scope note: rated for a current firmware plug used with the local API or Shelly Cloud; exposing the local HTTP API without a password would lower the system criteria sharply. The non-Pro Plug S has been superseded by the Plus/Gen3 line and is assessed as end of sale.
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
