Privilege escalation in Crestron Automate Vx

CVE-2025-47420

266 vulnerability in Crestron Automate VX allows Privilege Escalation.This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49.

Vulnerability class: Privilege Escalation

EPSS: 0.003 (26.8th percentile) — read the EPSS interpretation.

Affected products

Crestron Automate Vx — versions 5.6.8161.21536

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

25b0b659-c4b4-483f-aecb-067757d23ef3 (vendor-advisory)
25b0b659-c4b4-483f-aecb-067757d23ef3 (patch)
25b0b659-c4b4-483f-aecb-067757d23ef3 (release-notes)