PT-2025-19988 · Crestron · Crestron Automate Vx

CVE-2025-47417 · Publicado 2025-05-06 · Atualizado 2025-05-06

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Média

Vetor base

AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Crestron Automate VX versions 5.6.8161.21536 through 6.4.0.49

Description The issue allows exposure of sensitive information to an unauthorized actor, enabling functionality misuse. When the Enable Debug Images feature in Crestron Automate VX is active, snapshots of captured video or portions thereof are stored locally on the system without any visible indication.

Recommendations For Crestron Automate VX versions 5.6.8161.21536 through 6.4.0.49, consider disabling the Enable Debug Images feature to prevent unauthorized access to sensitive information until a patch is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2025-47417

Produtos afetados

Crestron Automate Vx

Referências · 7

• https://t.me/cvedetector/24655 · Publicação no Telegram
• https://security.crestron.com · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1919849025345307061 · Publicação no Twitter
• https://crestron.com/release_notes/automate_vx_6.4.1.8_release_notes.pdf · Nota
• https://crestron.com/Software-Firmware/Software/Automate-VX-Software/6-4-1-8 · Correção
• https://t.me/cvetracker/23208 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-47417 · Nota de Segurança