HIGHCVSS 8.8Vulnerability

CVE-2025-64120

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.

Properties

Severity: HIGH
Epss score: 0.0101
Cvss severity: HIGH
Cvss score: 8.8
Retrieved at: 2026-10-21T01:24:48+00:00
Score: 8.8
Last source: FIRST EPSS
Cve id: CVE-2025-64120
Cvss vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
First seen by Signal: 2026-09-30T23:57:03+00:00
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published at: 2026-01-02T22:15:44.403
Last modified: 2026-10-07T11:10:00.153
Epss percentile: 0.62569

Related Entities (6)

AFFECTS_PRODUCT (5)

→[Product]cpe:2.3:h:nuvationenergy:nuvmsc3-12s-c:-:*:*:*:*:*:*:*

→[Product]cpe:2.3:a:nuvationenergy:nplatform:*:*:*:*:*:*:*:*

→[Product]cpe:2.3:h:nuvationenergy:nuvmsc3-16s-c:-:*:*:*:*:*:*:*

→[Product]cpe:2.3:h:nuvationenergy:nuvmsc3-08s-c:-:*:*:*:*:*:*:*

→[Product]cpe:2.3:h:nuvationenergy:nuvmsc3-04s-c:-:*:*:*:*:*:*:*

HAS_WEAKNESS (1)

→[Weakness]Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Explore deeper with Ninja Signal's threat intelligence graph

Search in Spektr Open Signal Desktop