CVE Program partner
Crestron
Crestron Electronics, Inc.
CVEs, 365 days18 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
| Organisation | Crestron Electronics, Inc. |
| Role | CNA |
| Type | Vendor |
| Reports to | mitre |
| Scope | Crestron products. |
| Advisories | https://www.crestron.com/Security/Security_Advisories |
Latest CVEs · RSS
- CVE-2026-7865 2026-05-05 · CVSS 7.4A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument. A third party researcher Eugene Li
- CVE-2025-47415 2025-09-09 · CVSS 6.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CRESTRON TOUCHSCREENS x70 allows Relative Path Traversal.This is
- CVE-2025-47416 2025-09-09 · CVSS 5.9A vulnerability exists in the ConsoleFindCommandMatchList function in libsymproc. so imported by ctpd that may lead to unauthorized execution of an attacker-def
- CVE-2025-47421 2025-09-03 · CVSS 8.6Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in CRESTRON TOUCHSCREENS x70 allows Argument Injection.This iss
- CVE-2025-47420 2025-05-06 · CVSS 8.7266 vulnerability in Crestron Automate VX allows Privilege Escalation.This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49.
- CVE-2025-47419 2025-05-06 · CVSS 10.0Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows Web UI and API access
- CVE-2025-47418 2025-05-06 · CVSS 5.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. There is no visible indication wh
- CVE-2025-47417 2025-05-06 · CVSS 5.1Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. When Enable Debug Images in Cre