CVE-2025-64122

Nuvation Energy Multi-Stack Controller Private Key Stored on Device

CVSS 7.2 HIGHEPSS 0.1%CWE-522

Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller (MSC): through 2.5.1.

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H

Produtos afetados

Nuvation Energy · Multi-Stack Controller (MSC)

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.dragos.com/community/advisories/CVE-2025-64119