CRITICALCVSS 9.8Vulnerability

CVE-2025-64121

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.

Properties

Severity: CRITICAL
Epss score: 0.00397
Cvss score: 9.8
Cvss severity: CRITICAL
Retrieved at: 2026-10-21T01:24:48+00:00
Last source: FIRST EPSS
Score: 9.8
Cve id: CVE-2025-64121
Cvss vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
First seen by Signal: 2026-09-30T23:57:03+00:00
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published at: 2026-01-02T22:15:44.533
Last modified: 2026-10-07T11:10:00.153
Epss percentile: 0.3246

Related Entities (6)

AFFECTS_PRODUCT (5)

→[Product]cpe:2.3:h:nuvationenergy:nuvmsc3-16s-c:-:*:*:*:*:*:*:*

→[Product]cpe:2.3:a:nuvationenergy:nplatform:*:*:*:*:*:*:*:*

→[Product]cpe:2.3:h:nuvationenergy:nuvmsc3-12s-c:-:*:*:*:*:*:*:*

→[Product]cpe:2.3:h:nuvationenergy:nuvmsc3-08s-c:-:*:*:*:*:*:*:*

→[Product]cpe:2.3:h:nuvationenergy:nuvmsc3-04s-c:-:*:*:*:*:*:*:*

HAS_WEAKNESS (1)

→[Weakness]Authentication Bypass Using an Alternate Path or Channel

Explore deeper with Ninja Signal's threat intelligence graph

Search in Spektr Open Signal Desktop