Unrated severityNVD Advisory· Published Jan 2, 2026· Updated Jan 5, 2026
Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS access
CVE-2025-64123
Description
Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=2.5.1+ 1 more
- (no CPE)range: <=2.5.1
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.