Nuvation Battery Management System CVE-2025-64119

Use of Client-Side Authentication (CWE-603)

2026-01-02 ot-cert@dragos.com

Authentication Bypass

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 02, 2026 - 22:15 nvd

N/A

DescriptionCVE.org

A vulnerability in Nuvation Battery Management System allows Authentication Bypass.This issue affects Battery Management System: through 2.3.9.

Analysis

A vulnerability in Nuvation Battery Management System allows Authentication Bypass.This issue affects Battery Management System: through 2.3.9.

Technical ContextAI

Affects Nuvation Battery Management System. A vulnerability in Nuvation Battery Management System allows Authentication Bypass.This issue affects Battery Management System: through 2.3.9.

Affected ProductsAI

Product: Nuvation Battery Management System.

RemediationAI

Monitor vendor advisories for a patch.

Same weakness CWE-603 – Use of Client-Side Authentication

View all

CVE-2022-3218 CRITICAL POC

9.8

CVE-2017-7909 CRITICAL

9.8

CVE-2026-1363 CRITICAL

9.8

CVE-2022-33139 CRITICAL

9.8

CVE-2024-39375 CRITICAL

9.3

CVE-2020-7591 HIGH

8.8

CVE-2026-42098 HIGH

8.7

CVE-2026-40551 HIGH

8.4

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2013-2465 CRITICAL POC

9.8

CVE-2011-3544 CRITICAL POC

9.8

CVE-2012-1723 CRITICAL POC

9.8

CVE-2017-10271 HIGH POC

7.5

CVE-2015-1427 CRITICAL POC

9.8

CVE-2025-3248 CRITICAL POC

9.8

CVE-2025-64119 vulnerability details – vuln.today

Back