Cleartext Transmission during initial setup in Shelly TRV 20220811-15234 v.2.1.8 allows a local malicious user to obtain the Wi-Fi password.
shelly trv_firmware 2.1.8