PT-2026-1136 · Nuvation Energy · Nuvation Energy Multi-Stack Controller
CVE-2025-64121
·
Publicado
2025-01-13
·
Atualizado
2026-01-03
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Nuvation Energy Multi-Stack Controller (MSC) versions 2.3.8 through 2.5.0
Description
An authentication bypass issue exists in Nuvation Energy Multi-Stack Controller (MSC). This allows unauthenticated attackers to gain full control. The issue involves bypassing authentication through an alternate path or channel.
Recommendations
Update to a version later than 2.5.0.
Correção
Authentication Bypass Using an Alternate Path or Channel
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Nuvation Energy Multi-Stack Controller