What’s Vulnerable › Vulnerabilities

CVE-2025-47420: User Permissions on Network API

• Severity: high (CVSS 8.7 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-06 · updated 2026-06-17
• Weakness: CWE-269

Description

266 vulnerability in Crestron Automate VX allows Privilege Escalation.This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49.

Affected products

• Crestron Automate VX: from 5.6.8161.21536 through 6.4.0.49

References

• https://security.crestron.com/
• https://www.crestron.com/Software-Firmware/Software/Automate-VX-Software/6-4-1-8
• https://www.crestron.com/release_notes/automate_vx_6.4.1.8_release_notes.pdf

Get alerted when CVE-2025-47420 or the next vulnerability affects your stack