1. Home
    Item seperator
  3. Item seperator
    CVE-2025-24818

CVE-2025-24818
An OS Command Injection vulnerability in Nokia MantaRay NM

Public disclosure

07-04-2026

Last updated

07-04-2026

Vulnerability type

Command Injection

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS score

8.0

Description

Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Log Search application.

Affected products and versions

All MantaRay NM versions earlier than 25R1-NM (exclusive).
 

Mitigation plan

Fixes have been provided in MantaRay NM Security Update SU1456 (for 24R2-NM and 24R3-NM), as well as in 25R1-NM and later releases.

Acknowledgements

  • Andrea Carlo Maria Dattola (TIM S.p.A)
  • Cristina Coppola (TIM S.p.A)
  • Carlo Pannullo (TIM S.p.A)
  • Massimiliano Brolli (TIM S.p.A)

References