Skip to content
OpenAdvisories

Product · Nuvation Energy

Multi-Stack Controller (MSC)

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2025-64124

    Nuvation Energy Multi-Stack Controller OS Command Injection

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): before 2.5.1.

    Nuvation Energy Multi-Stack Controller (MSC)
  • High 7.9
    CVE-2025-64123

    Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS access

    Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.

    Nuvation Energy Multi-Stack Controller (MSC)
  • High 7.2
    CVE-2025-64122

    Nuvation Energy Multi-Stack Controller Private Key Stored on Device

    Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller (MSC): through 2.5.1.

    Nuvation Energy Multi-Stack Controller (MSC)