Nuvation Battery Management System Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in Nuvation Battery Management System (BMS) versions through 2.3.9. This vulnerability allows unauthorized access by bypassing authentication mechanisms.

Impact

Exploitation of this vulnerability allows for client-side authentication bypass, enabling unauthorized users to gain access to the system or its functionalities.

Remediation

End users are advised to update their Battery Management System to version 2.5.1. Consult Nuvation's documentation for guidance on enabling authentication and setting a strong password. Security-conscious users may also wish to restrict access to the nCloud service if it is not needed for their operations.