Nuvation Battery Storage Systems Vulnerabilities: CVE-2025-64119
Summary: Dragos evaluated Nuvation Energy's Battery Management System and Multi-Stack Controller devices and found vulnerabilities in the BMS through the latest software release, Descartes, plus flaws in the MSC that are fixed in nPlatform 2.5.1. One vulnerability remains present in the MSC including the current release, and a separate flaw in the nCloud/VPN service was remediated automatically for all customers.
Why it matters: The vendor's fix is nPlatform 2.5.1 / MSC 22.4.0, and one known flaw has no fix in the current MSC release - so any storage deployment still on older builds is carrying an issue that a patch will not close.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Mentions
- CVE-2025-64119
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026