CVE-2025-64123

Critical · CVSS 9.8

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: closed appliance; CWE-441

Description

Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.

References

https://www.dragos.com/community/advisories/CVE-2025-64119

Status: profiled · ingested 2026-10-07T12:00:43.000Z