CRITICALCVSS 9.8Vulnerability

CVE-2025-64123

Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.

Properties

Severity: CRITICAL
Epss score: 0.00319
Cvss score: 9.8
Cvss severity: CRITICAL
Retrieved at: 2026-10-21T01:24:48+00:00
Last source: FIRST EPSS
Score: 9.8
Cve id: CVE-2025-64123
Cvss vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
First seen by Signal: 2026-09-30T23:57:03+00:00
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published at: 2026-01-02T22:15:44.787
Last modified: 2026-10-07T11:10:00.153
Epss percentile: 0.23423

Related Entities (6)

AFFECTS_PRODUCT (5)

→[Product]cpe:2.3:a:nuvationenergy:nplatform:*:*:*:*:*:*:*:*

→[Product]cpe:2.3:h:nuvationenergy:nuvmsc3-16s-c:-:*:*:*:*:*:*:*

→[Product]cpe:2.3:h:nuvationenergy:nuvmsc3-04s-c:-:*:*:*:*:*:*:*

→[Product]cpe:2.3:h:nuvationenergy:nuvmsc3-12s-c:-:*:*:*:*:*:*:*

→[Product]cpe:2.3:h:nuvationenergy:nuvmsc3-08s-c:-:*:*:*:*:*:*:*

HAS_WEAKNESS (1)

→[Weakness]Unintended Proxy or Intermediary ('Confused Deputy')

Explore deeper with Ninja Signal's threat intelligence graph

Search in Spektr Open Signal Desktop