CVE-2025-24819
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Nokia MantaRay NM is vulnerable to a Relative Path Traversal vulnerability due to improper validation of input parameter on the file system in Software Manager application.
Risk Assessment
The vulnerability could allow an attacker to access files outside the intended directory, potentially leading to disclosure of sensitive information or modification of system files.
Recommendation
It is recommended to apply patches provided by the vendor and strengthen input validation in the Software Manager application.
Other vulnerabilities in Nokia MantaRay NM
See all- CVE-2025-7406High
A vulnerability in Nokia MantaRay NM allows a local attacker with local admin privileges to escalate to full root privileges on the host. Successful exploitation results in root-level filesystem access and the ability to execute actions as root.
- CVE-2025-24815High
Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker to upload malicious files onto the system.
Original NVD description (English source)
Nokia MantaRay NM is vulnerable to a Relative Path Traversal vulnerability due to improper validation of input parameter on the file system in Software Manager application.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS