Crestron Automate VX vulnerabilities

4 vulnerabilities

Known vulnerabilities in Crestron Automate VX, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2025-47419crestronautomate vx
EPSS score
0.29%
Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows Web UI and API access over non-secure network ports which exposes sensitive information such as user passwords. This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49.5.1CVE-2025-47417crestronautomate vx
EPSS score
0.44%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. When Enable Debug Images in Crestron Automate VX is active, snapshots of the captured video or portions thereof are stored locally on the system, and there is no visible indication that this is being done. This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49.8.7CVE-2025-47420crestronautomate vx
EPSS score
0.38%
266 vulnerability in Crestron Automate VX allows Privilege Escalation.This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49.5.3CVE-2025-47418crestronautomate vx
EPSS score
0.43%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. There is no visible indication when the system is recording and recording can be enabled remotely via a network API. This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49.