VULNERABILITY INTELLIGENCE
CVE-2025-47419
EPSS probability0.29%
CISA KEVNot currently listed
Published2025-05-06
Last modified2026-06-17
Description
Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows Web UI and API access over non-secure network ports which exposes sensitive information such as user passwords. This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49.
Weakness classification
- 25b0b659-c4b4-483f-aecb-067757d23ef3: CWE-319