Crestron Automate VX up to 6.4.0.49 Network Traffic cleartext transmission

Summaryinfo

A vulnerability described as problematic has been identified in Crestron Automate VX up to 6.4.0.49. The affected element is an unknown function of the component Network Traffic Handler. Such manipulation leads to cleartext transmission. This vulnerability is documented as CVE-2025-47419. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Crestron Automate VX up to 6.4.0.49. Affected by this issue is an unknown code block of the component Network Traffic Handler. The manipulation with an unknown input leads to a cleartext transmission vulnerability. Using CWE to declare the problem leads to CWE-319. The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. Impacted is confidentiality. CVE summarizes:

Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows Web UI and API access over non-secure network ports which exposes sensitive information such as user passwords. This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49.

This vulnerability is handled as CVE-2025-47419 since 05/06/2025. The exploitation is known to be difficult. The attack may be launched remotely. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1040.

Upgrading eliminates this vulnerability. The upgrade is hosted for download at crestron.com.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Automation Software

Vendor

• Crestron

Name

• Automate VX

Version

• 6.4.0.0
• 6.4.0.1
• 6.4.0.2
• 6.4.0.3
• 6.4.0.4
• 6.4.0.5
• 6.4.0.6
• 6.4.0.7
• 6.4.0.8
• 6.4.0.9
• 6.4.0.10
• 6.4.0.11
• 6.4.0.12
• 6.4.0.13
• 6.4.0.14
• 6.4.0.15
• 6.4.0.16
• 6.4.0.17
• 6.4.0.18
• 6.4.0.19
• 6.4.0.20
• 6.4.0.21
• 6.4.0.22
• 6.4.0.23
• 6.4.0.24
• 6.4.0.25
• 6.4.0.26
• 6.4.0.27
• 6.4.0.28
• 6.4.0.29
• 6.4.0.30
• 6.4.0.31
• 6.4.0.32
• 6.4.0.33
• 6.4.0.34
• 6.4.0.35
• 6.4.0.36
• 6.4.0.37
• 6.4.0.38
• 6.4.0.39
• 6.4.0.40
• 6.4.0.41
• 6.4.0.42
• 6.4.0.43
• 6.4.0.44
• 6.4.0.45
• 6.4.0.46
• 6.4.0.47
• 6.4.0.48
• 6.4.0.49

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion