Security Advisory

CVE-2025-64120

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-01-02 21:33:23

Last updated 2026-01-05 20:37:36

Assigner Dragos

CVSS score 9.4

State PUBLISHED

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.

← Browse all CVEs View on cve.org ↗