PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-24817 Nokia CVE debrief

Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Symptom Collector application. This high-severity vulnerability requires immediate attention from defenders to assess exposure and verify patching to prevent potential exploitation. The vulnerability has a high CVSS score of 8, indicating a significant risk to system availability and integrity. Defenders should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Vendor
Nokia
Product
MantaRay NM
CVSS
HIGH 8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-07
Original CVE updated
2026-09-30
Advisory published
2026-04-07
Advisory updated
2026-09-30

Who should care

Defenders responsible for Nokia MantaRay NM systems, particularly those in charge of patching and vulnerability management, should prioritize this vulnerability due to its high severity and potential impact on system availability and integrity. Additionally, security teams and operators managing affected systems should review compensating controls for exposed systems while remediation is scheduled and verified. This

Why it matters

This high-severity OS command injection vulnerability in Nokia MantaRay NM requires immediate attention from defenders to assess exposure and verify patching to prevent potential exploitation.

  • Potential for exploitation leading to unauthorized access
  • Need for verification of patching to prevent exploitation
  • Potential impact on system availability and integrity

Technical summary

The Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Symptom Collector application. This vulnerability has a high CVSS score of 8, indicating a significant risk to system availability and integrity. The vulnerability allows attackers to execute arbitrary OS commands, potentially leading to unauthorized access and system compromise. Defenders should assess exposure of Nokia MantaRay NM systems to this vulnerability and verify patching of affected systems.

Defensive priority

High priority for defenders to assess exposure and verify patching due to the high CVSS score and potential for exploitation.

Recommended defensive actions

  • Assess exposure of Nokia MantaRay NM systems to this vulnerability
  • Verify patching of affected systems
  • Monitor for potential exploitation attempts

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability, including its description, CVSS score, and affected product.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-24817 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-24817

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-24817 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-24817

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-24817/

    b48c3b8f-639e-4c16-8725-497bc411dad0 - Vendor Advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.