CNNVD-202601-068 Information
Jan 02, 2026
cve
CNNVD ID
CNNVD-202601-068
Related CVE
- CNNVD Published: 2026-01-02
Description (Chinese)
Nuvation Energy Multi-Stack Controller是美国Nuvation Energy公司的一个电池管理系统中的控制单元。 Nuvation Energy Multi-Stack Controller (MSC) 2.3.8版本至2.5.1之前版本存在安全漏洞，该漏洞源于特殊元素中和不当，可能导致OS命令注入。
Description (English)
Nuvage Energy Multi-Stack Contractor is the control unit in a battery management system of Nuvation Energy, United States. There is a security loophole between version 2.3.8 and previous version 2.5.1 of Nuvation Energy Multi-StackController (MSC), which originates in a special element and may lead to an OS command injection.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Nuvation Energy
Published
2026-01-02
Last Modified
2026-02-24
References
https://www.dragos.com/community/advisories/CVE-2025-64119 https://access.redhat.com/security/cve/cve-2025-64120
Patch
https://nuvationenergy.com/battery-management-systems/multi-stack-controller/
Share on: