Approved changes feed: RSS · Atom

cpe:2.3:h:nuvationenergy:nuvmsc3-04s-c:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorNuvationenergy (26e15c34-fbba-52ff-8387-8c8797a96809)
ProductNuvmsc3 04S C (47e96e9d-4d25-5880-99b5-8615363919e7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-64124 not_vulnerable 2026-06-08 07:39:18.032644 Nuvation Energy Multi-Stack Controller OS Command Injection
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): before 2.5.1.
Published: 2026-01-03T00:28:24.506Z
Updated: 2026-01-05T20:37:04.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64123 not_vulnerable 2026-06-08 07:39:18.031827 Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS access
Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.
Published: 2026-01-02T21:41:25.568Z
Updated: 2026-01-05T20:37:19.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64122 not_vulnerable 2026-06-08 07:39:18.031237 Nuvation Energy Multi-Stack Controller Private Key Stored on Device
Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller (MSC): through 2.5.1.
Published: 2026-01-02T21:39:26.621Z
Updated: 2026-01-05T20:37:25.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64121 not_vulnerable 2026-06-08 07:39:18.027247 Nuvation Energy Multi-Stack Controller Authentication Bypass
Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.
Published: 2026-01-02T21:35:53.593Z
Updated: 2026-01-05T20:37:31.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64120 not_vulnerable 2026-06-08 07:39:18.024834 Nuvation Energy Multi-Stack Controller OS Command Injection
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.
Published: 2026-01-02T21:33:23.491Z
Updated: 2026-01-05T20:37:36.934Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.