CVE-2025-24815
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker to upload malicious files onto the system.
Risk Assessment
The risk involves an attacker uploading malicious software, potentially leading to system compromise, data theft, or network disruption.
Recommendation
It is recommended to immediately update Nokia MantaRay NM to the latest patched version and implement additional server-side file type validation.
Other vulnerabilities in Nokia MantaRay NM
See all- CVE-2025-7406High
A vulnerability in Nokia MantaRay NM allows a local attacker with local admin privileges to escalate to full root privileges on the host. Successful exploitation results in root-level filesystem access and the ability to execute actions as root.
- CVE-2025-24819Medium
Nokia MantaRay NM is vulnerable to a Relative Path Traversal vulnerability due to improper validation of input parameter on the file system in Software Manager application.
Original NVD description (English source)
Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker to upload malicious files onto the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS