Approved changes feed: RSS · Atom

cpe:2.3:a:nuvation_energy:multi-stack_controller_(msc):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNuvation Energy (04cb5521-0814-5176-bf6e-55c33623c07d)
ProductMulti Stack Controller (Msc) (5ba344d6-b649-5386-881b-33ea07f4735c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-64124 vulnerable 2026-06-08 07:39:18.032407 Nuvation Energy Multi-Stack Controller OS Command Injection
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): before 2.5.1.
Published: 2026-01-03T00:28:24.506Z
Updated: 2026-01-05T20:37:04.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64123 vulnerable 2026-06-08 07:39:18.031772 Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS access
Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.
Published: 2026-01-02T21:41:25.568Z
Updated: 2026-01-05T20:37:19.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64122 vulnerable 2026-06-08 07:39:18.031177 Nuvation Energy Multi-Stack Controller Private Key Stored on Device
Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller (MSC): through 2.5.1.
Published: 2026-01-02T21:39:26.621Z
Updated: 2026-01-05T20:37:25.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64121 vulnerable 2026-06-08 07:39:18.027034 Nuvation Energy Multi-Stack Controller Authentication Bypass
Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.
Published: 2026-01-02T21:35:53.593Z
Updated: 2026-01-05T20:37:31.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64120 vulnerable 2026-06-08 07:39:18.022553 Nuvation Energy Multi-Stack Controller OS Command Injection
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.
Published: 2026-01-02T21:33:23.491Z
Updated: 2026-01-05T20:37:36.934Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.