Skip to content
OpenAdvisories
High · 7.9 CVE-2025-64123 EUVD-2025-206223GHSA-rw75-27g5-4c67

Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS access

Published Jan 2, 2026 · Updated Jan 5, 2026 · Assigned by Dragos

Description

Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.

Affected products

VendorProductAffectedFixed
Nuvation Energy Multi-Stack Controller (MSC) ≤ 2.5.1 —

References