critical10.0
CVE-2025-47419
Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic.
Impact
Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows Web UI and API access over non-secure network ports which exposes sensitive information such as user passwords. This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49.
Affected products
| Product | Affected versions |
|---|---|
| Automate VX: From 5.6.8161.21536 | through 6.4.0.49. |
Versions were read from the advisory text. No structured product data has been published for this record yet.