Vulnerability · Published May 6, 2025 · Assigned by Crestron
CVE-2025-47417Enable Debug Images
Medium 5.1
In plain English
A medium-severity information exposure in Automate VX from Crestron. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).
Official description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. When Enable Debug Images in Crestron Automate VX is active, snapshots of the captured video or portions thereof are stored locally on the system, and there is no visible indication that this is being done. This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Crestron | Automate VX | 5.6.8161.21536 – through 6.4.0.49 |
Weakness: CWE-200 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N