CVE-2025-64122

Nuvation Energy Multi-Stack Controller Private Key Stored on Device PUBLISHED

Description (CNA)

Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller (MSC): through 2.5.1.

Affected (CNA)

Vendor / product	Versions
Nuvation Energy / Multi-Stack Controller (MSC)	affected 0 through 2.5.1

CWE

CWE-522

References

https://www.dragos.com/community/advisories/CVE-2025-64119

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.