Ad

CVE-2025-24818

HIGH CVSS 3.1: 8.0 EPSS 0.11%
Updated Apr 07, 2026
Nokia
Parameter Value
CVSS 8.0 (HIGH)
Type CWE-77 (Command Injection)
Vendor Nokia
Public PoC No

Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Log Search application.

Attack Parameters

Attack Vector
Adjacent
Requires local network access
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service

CVSS Vector v3.1

Weakness Type (CWE)