Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-47296 State: REJECTED Published: N/A Last Updated: 2025-05-06T02:55:08.653Z Description: No description available.
CVE ID: CVE-2025-47297 State: REJECTED Published: N/A Last Updated: 2025-05-06T02:55:08.181Z Description: No description available.
CVE ID: CVE-2025-47298 State: REJECTED Published: N/A Last Updated: 2025-05-06T02:55:07.675Z Description: No description available.
CVE ID: CVE-2025-47299 State: REJECTED Published: N/A Last Updated: 2025-05-06T02:55:07.173Z Description: No description available.
CVE ID: CVE-2025-47300 State: REJECTED Published: N/A Last Updated: 2025-05-06T02:55:06.593Z Description: No description available.
CVE ID: CVE-2025-47301 State: REJECTED Published: N/A Last Updated: 2025-05-06T02:55:06.104Z Description: No description available.
CVE ID: CVE-2025-47302 State: REJECTED Published: N/A Last Updated: 2025-05-06T02:55:05.584Z Description: No description available.
CVE ID: CVE-2025-47303 State: REJECTED Published: N/A Last Updated: 2025-05-06T02:55:04.994Z Description: No description available.
CVE ID: CVE-2025-47314 State: PUBLISHED Published: 2025-09-24T15:33:46.107Z Last Updated: 2025-09-25T03:55:39.147Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Memory corruption while processing data sent by FE driver. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE ID: CVE-2025-47315 State: PUBLISHED Published: 2025-09-24T15:33:47.312Z Last Updated: 2025-09-25T03:55:39.999Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while handling repeated memory unmap requests from guest VM. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE ID: CVE-2025-47316 State: PUBLISHED Published: 2025-09-24T15:33:48.625Z Last Updated: 2025-09-25T03:55:40.863Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-415 Description: Memory corruption due to double free when multiple threads race to set the timestamp store. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE ID: CVE-2025-47317 State: PUBLISHED Published: 2025-09-24T15:33:49.869Z Last Updated: 2025-09-25T03:55:41.891Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Memory corruption due to global buffer overflow when a test command uses an invalid payload type. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE ID: CVE-2025-47318 State: PUBLISHED Published: 2025-09-24T15:33:51.163Z Last Updated: 2025-09-24T17:28:16.793Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing the EPTM test control message to get the test pattern. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE ID: CVE-2025-47324 State: PUBLISHED Published: 2025-08-06T07:26:12.864Z Last Updated: 2025-08-06T13:28:25.502Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-1230 Description: Information disclosure while accessing and modifying the PIB file of a remote device via powerline. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2025-bulletin.html
CVE ID: CVE-2025-47326 State: PUBLISHED Published: 2025-09-24T15:33:52.473Z Last Updated: 2025-09-25T18:34:13.643Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while handling command data during power control processing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE ID: CVE-2025-47327 State: PUBLISHED Published: 2025-09-24T15:33:53.779Z Last Updated: 2025-09-25T18:33:46.677Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while encoding the image data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE ID: CVE-2025-47328 State: PUBLISHED Published: 2025-09-24T15:33:54.999Z Last Updated: 2025-09-25T18:34:37.546Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while processing power control requests with invalid antenna or stream values. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE ID: CVE-2025-47329 State: PUBLISHED Published: 2025-09-24T15:33:56.356Z Last Updated: 2025-09-25T18:33:31.210Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-763 Description: Memory corruption while handling invalid inputs in application info setup. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html
CVE ID: CVE-2025-47338 State: PUBLISHED Published: 2025-10-09T03:18:07.257Z Last Updated: 2025-10-10T03:55:13.986Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-822 Description: Memory corruption while processing escape commands from userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-47340 State: PUBLISHED Published: 2025-10-09T03:18:08.408Z Last Updated: 2025-10-10T03:55:13.154Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-787 Description: Memory corruption while processing IOCTL call to get the mapping. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-47341 State: PUBLISHED Published: 2025-10-09T03:18:09.593Z Last Updated: 2025-10-10T03:55:12.181Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: memory corruption while processing an image encoding completion event. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-47342 State: PUBLISHED Published: 2025-10-09T03:18:10.744Z Last Updated: 2025-10-09T16:07:32.297Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Transient DOS may occur when multi-profile concurrency arises with QHS enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-47347 State: PUBLISHED Published: 2025-10-09T03:18:11.938Z Last Updated: 2025-10-10T03:55:23.403Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-121 Description: Memory corruption while processing control commands in the virtual memory management interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-47349 State: PUBLISHED Published: 2025-10-09T03:18:13.184Z Last Updated: 2025-10-10T03:55:11.360Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: Memory corruption while processing an escape call. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-47351 State: PUBLISHED Published: 2025-10-09T03:18:14.416Z Last Updated: 2025-10-10T03:55:10.583Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-190 Description: Memory corruption while processing user buffers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-47352 State: PUBLISHED Published: 2025-11-04T03:19:14.758Z Last Updated: 2025-11-04T14:46:09.028Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption while processing audio streaming operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html
CVE ID: CVE-2025-47353 State: PUBLISHED Published: 2025-11-04T03:19:16.035Z Last Updated: 2025-11-04T14:45:53.136Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-749 Description: Memory corruption while processing request sent from GVM. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html
CVE ID: CVE-2025-47354 State: PUBLISHED Published: 2025-10-09T03:18:15.699Z Last Updated: 2025-10-10T03:55:09.655Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while allocating buffers in DSP service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-47355 State: PUBLISHED Published: 2025-10-09T03:18:16.885Z Last Updated: 2025-10-10T03:55:08.484Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-787 Description: Memory corruption while invoking remote procedure IOCTL calls. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2025-bulletin.html
CVE ID: CVE-2025-47357 State: PUBLISHED Published: 2025-11-04T03:19:17.319Z Last Updated: 2025-11-04T19:18:49.323Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-306 Description: Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html
CVE ID: CVE-2025-47360 State: PUBLISHED Published: 2025-11-04T03:19:18.581Z Last Updated: 2025-11-04T14:45:44.073Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-121 Description: Memory corruption while processing client message during device management. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html
CVE ID: CVE-2025-47361 State: PUBLISHED Published: 2025-11-04T03:19:19.924Z Last Updated: 2025-11-04T14:45:30.355Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption when triggering a subsystem crash with an out-of-range identifier. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html
CVE ID: CVE-2025-47362 State: PUBLISHED Published: 2025-11-04T03:19:21.202Z Last Updated: 2025-11-04T19:18:27.877Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure while processing message from client with invalid payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html
CVE ID: CVE-2025-47365 State: PUBLISHED Published: 2025-11-04T03:19:22.474Z Last Updated: 2025-11-04T14:45:13.687Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-190 Description: Memory corruption while processing large input data from a remote source via a communication interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html
CVE ID: CVE-2025-47367 State: PUBLISHED Published: 2025-11-04T03:19:23.734Z Last Updated: 2025-11-04T14:45:01.835Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-787 Description: Memory corruption while accessing a buffer during IOCTL processing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html
CVE ID: CVE-2025-47368 State: PUBLISHED Published: 2025-11-04T03:19:24.982Z Last Updated: 2025-11-04T14:44:51.488Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html
CVE ID: CVE-2025-47370 State: PUBLISHED Published: 2025-11-04T03:19:26.256Z Last Updated: 2025-11-04T19:00:52.629Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-617 Description: Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2025-bulletin.html
CVE ID: CVE-2025-47410 State: PUBLISHED Published: 2025-10-18T15:15:09.547Z Last Updated: 2025-11-04T21:10:53.480Z Vendors: Apache Software Foundation Products: Apache Geode Problem Types: CWE-352 Description: Apache Geode is vulnerable to CSRF attacks through GET requests to the Management and Monitoring REST API that could allow an attacker who has tricked a user into giving up their Geode session credentials to submit malicious commands on the target system on behalf of the authenticated user. This issue affects Apache Geode: versions 1.10 through 1.15.1 Users are recommended to upgrade to version 1.15.2, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Prog
ended to upgrade to version 1.15.2, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/k88tv3rhl4ymsvt4h6qsv7sq10q5prrt
CVE ID: CVE-2025-47415 State: PUBLISHED Published: 2025-09-09T19:20:35.244Z Last Updated: 2025-09-10T15:47:05.306Z Vendors: CRESTRON Products: TOUCHSCREENS x60, x70 series Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CRESTRON TOUCHSCREENS x70 allows Relative Path Traversal.This issue affects TOUCHSCREENS x70: from 3.000.0110.001 before 3.001.0031.001. Confirmed Affected Hardware: TSW-760, TSW-1060 Confirmed Affected Firmware: 3.002.1061 - (no fix released, product discontinued) For x70 The Affected Firmware:- 3.000.0110.001 and versions below The Fixed Firmware:- 3.001.0031.001 Additional Analyst Notes: - C
Affected Firmware:- 3.000.0110.001 and versions below The Fixed Firmware:- 3.001.0031.001 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.crestron.com - https://www.crestron.com/Software-Firmware/Firmware/Touchpanels/TS-770-TS-1070-TSS-770-TSS-1070-TSW-570/3-002-0040-001
CVE ID: CVE-2025-47416 State: PUBLISHED Published: 2025-09-09T13:52:45.855Z Last Updated: 2025-09-09T14:06:41.093Z Vendors: CRESTRON Products: TOUCHSCREEN x70, Touchscreen x60s Problem Types: CWE-697 Description: A vulnerability exists in the ConsoleFindCommandMatchList function in libsymproc. so imported by ctpd that may lead to unauthorized execution of an attacker-defined file that gets prioritized by the ConsoleFindCommandMatchList. A third-party researcher discovered that the ConsoleFindCommandMatchList enumerates the /dev/shm/symproc/c directory in alphabetical order to identify console commands. Permission levels are inferred from the integer values present in each command's file name
to identify console commands. Permission levels are inferred from the integer values present in each command's file name. Confirmed Affected Hardware: TSW-760, TSW-1060 Confirmed Affected Firmware: 3.002.1061 Fixed Firmware: no fixed released (product is discontinued and end of life) For x70 The Affected Firmware:- 3.000.0110.001 and versions below The Fixed Firmware:- 3.001.0031.001 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.crestron.com - https://www.crestron.com/Software-Firmware/Firmware/Touchpanels/TS-770-TS-1070-TSS-770-TSS-1070-TSW-570/3-002-0040-001
CVE ID: CVE-2025-47417 State: PUBLISHED Published: 2025-05-06T19:49:09.288Z Last Updated: 2025-05-08T18:35:06.098Z Vendors: Crestron Products: Automate VX Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. When Enable Debug Images in Crestron Automate VX is active, snapshots of the captured video or portions thereof are stored locally on the system, and there is no visible indication that this is being done. This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.crestron.com - https://ww
gh 6.4.0.49. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.crestron.com - https://www.crestron.com/Software-Firmware/Software/Automate-VX-Software/6-4-1-8 - https://www.crestron.com/release_notes/automate_vx_6.4.1.8_release_notes.pdf
CVE ID: CVE-2025-47418 State: PUBLISHED Published: 2025-05-06T20:13:38.805Z Last Updated: 2025-05-07T14:04:11.178Z Vendors: Crestron Products: Automate VX Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. There is no visible indication when the system is recording and recording can be enabled remotely via a network API. This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.crestron.com/ - https://www.crestron.com/Software-Firmware/Software/Automate-VX-Software/6-4-1-8 - https://www.cre
urity.crestron.com/ - https://www.crestron.com/Software-Firmware/Software/Automate-VX-Software/6-4-1-8 - https://www.crestron.com/release_notes/automate_vx_6.4.1.8_release_notes.pdf
CVE ID: CVE-2025-47419 State: PUBLISHED Published: 2025-05-06T20:52:44.604Z Last Updated: 2025-05-07T14:03:57.638Z Vendors: Crestron Products: Automate VX Problem Types: CWE-319 Description: Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows Web UI and API access over non-secure network ports which exposes sensitive information such as user passwords. This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.crestron.com/ - https://www.crestron.com/Software-Firmware/Software/Automate-VX-Software/6-4-1-8 - https://w
://security.crestron.com/ - https://www.crestron.com/Software-Firmware/Software/Automate-VX-Software/6-4-1-8 - https://www.crestron.com/release_notes/automate_vx_6.4.1.8_release_notes.pdf
CVE ID: CVE-2025-47420 State: PUBLISHED Published: 2025-05-06T21:33:39.188Z Last Updated: 2025-05-07T14:03:50.793Z Vendors: Crestron Products: Automate VX Problem Types: CWE-269 Description: 266 vulnerability in Crestron Automate VX allows Privilege Escalation.This issue affects Automate VX: from 5.6.8161.21536 through 6.4.0.49. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.crestron.com/ - https://www.crestron.com/Software-Firmware/Software/Automate-VX-Software/6-4-1-8 - https://www.crestron.com/release_notes/automate_vx_6.4.1.8_release_notes.pdf
CVE ID: CVE-2025-47421 State: PUBLISHED Published: 2025-09-03T13:49:40.856Z Last Updated: 2025-09-03T13:59:32.186Z Vendors: CRESTRON Products: TOUCHSCREENS x70 Problem Types: CWE-88 Description: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in CRESTRON TOUCHSCREENS x70 allows Argument Injection.This issue affects TOUCHSCREENS x70: from 3.001.0031.001 through 3.001.0034.001. A specially crafted SCP command sent via SSH login string can lead a valid administrator user to gain Privileged Operating System access on the device. Following Products Models are affected: TSW-x70 TSW-x60 TST-1080 AM-3000/3100/3200 Soundbar VB70 HD-PS622/621/402 HD-TXU
Following Products Models are affected: TSW-x70 TSW-x60 TST-1080 AM-3000/3100/3200 Soundbar VB70 HD-PS622/621/402 HD-TXU-RXU-4kZ-211 HD-MDNXM-4KZ-E *Note: additional firmware updates will be published once made available Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.crestron.com - https://https://www.crestron.com/Software-Firmware/Firmware/Touchpanels/TS-770-TS-1070-TSS-770-TSS-1070-TSW-570/3-002-0040-001 - https://https://www.crestron.com/release_notes/tsw-xx70_3.002.0040.001_release_notes.pdf
CVE ID: CVE-2025-47422 State: PUBLISHED Published: 2025-07-08T00:00:00.000Z Last Updated: 2025-07-24T16:54:22.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advanced Installer before 22.6 has an uncontrolled search path element local privilege escalation vulnerability. When running as SYSTEM in certain configurations, Advanced Installer looks in standard-user writable locations for non-existent binaries and executes them as SYSTEM. A low-privileged attacker can place a malicious binary in a targeted folder; when the installer is executed, the attacker achieves arbitrary SYSTEM code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.advanc