What is the CVSS score of CVE-2025-64123?

CVE-2025-64123 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Nplatform are affected by CVE-2025-64123?

CVE-2025-64123 presents critical security risk rated CVSS 9.8. Successful exploitation could critically impact the confidentiality, integrity, and availability of affected systems.

How to fix or mitigate CVE-2025-64123?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Monitor vendor channels for patch availability.

Nplatform CVE-2025-64123

CRITICAL

Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441)

2026-01-02 ot-cert@dragos.com

Information Disclosure Nplatform

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 02, 2026 - 22:15 nvd

CRITICAL 9.8

DescriptionCVE.org

Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.

AnalysisAI

Nuvation Energy MSC through 2.5.1 can be used as an unintended network proxy to bridge security boundaries. An attacker can leverage the controller to access networks that should be isolated, turning the battery controller into a pivot point.

Technical ContextAI

The Multi-Stack Controller contains an unintended proxy/intermediary vulnerability (CWE-441) that allows network traffic to be forwarded through the device. In energy infrastructure where IT and OT networks are supposed to be segmented, this effectively bridges the air gap.

RemediationAI

Implement additional network segmentation that does not rely on the MSC as a boundary. Add firewall rules blocking unexpected traffic patterns from the MSC. Monitor MSC network traffic for anomalous connections.