CNNVD-202601-064 Information

CNNVD ID

CNNVD-202601-064

CVE-2025-64121

  • CNNVD Published: 2026-01-02

Description (Chinese)

Nuvation Energy Multi-Stack Controller是美国Nuvation Energy公司的一个电池管理系统中的控制单元。 Nuvation Energy Multi-Stack Controller 2.3.8版本至2.5.1之前版本存在安全漏洞,该漏洞源于使用替代路径或通道绕过身份验证,可能导致身份验证绕过。

Description (English)

Nuvage Energy Multi-Stack Contractor is the control unit in a battery management system of Nuvation Energy, United States. There is a security loophole in previous versions of Nuvation Energy Multi-Stack Consultants 2.3.8 to 2.5.1, which stems from the use of alternative paths or channels to bypass identification, which may result in the identification being bypassed.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Nuvation Energy

Published

2026-01-02

Last Modified

2026-02-24

References

https://www.dragos.com/community/advisories/CVE-2025-64119 https://access.redhat.com/security/cve/cve-2025-64121

Patch

https://nuvationenergy.com/battery-management-systems/multi-stack-controller/

Share on: