Skip to content
OpenAdvisories
High · 7.2 CVE-2025-64122 EUVD-2025-206224GHSA-2hrm-3727-3mc5

Nuvation Energy Multi-Stack Controller Private Key Stored on Device

Published Jan 2, 2026 · Updated Jan 5, 2026 · Assigned by Dragos

Description

Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller (MSC): through 2.5.1.

Affected products

VendorProductAffectedFixed
Nuvation Energy Multi-Stack Controller (MSC) ≤ 2.5.1 —

References