Nuvation Energy Multi-Stack Controller Authentication Bypass Vulnerability

A vulnerability allowing authentication bypass has been identified in Nuvation Energy's Multi-Stack Controller (MSC) versions 2.3.8 prior to 2.5.1. This vulnerability arises from an authentication bypass using an alternate path or channel, allowing unauthorized access or actions on the affected system.

Impact

Exploitation of this vulnerability allows for authentication bypass, enabling unauthorized users to gain access or privileges on the affected system.

Remediation

Users are advised to update their Multi-Stack Controller to version 2.5.1 or 22.4.0. Consult Nuvation's documentation for instructions on enabling authentication and setting a strong password. Security-conscious users may also wish to restrict access to the nCloud service if it is not necessary for their operations.