CVE-2025-24819 Nokia CVE debrief

Who should care

Defenders responsible for Nokia MantaRay NM deployments should assess exposure and prioritize patching to prevent potential exploitation. They should also verify and apply the vendor's patch, assess exposure in their environment, and monitor for potential exploitation attempts. Additionally, defenders should review compensating controls for exposed systems while remediation is scheduled and verified.

Why it matters

CVE-2025-24819 is a Relative Path Traversal vulnerability in Nokia MantaRay NM that requires verification and patching to prevent exploitation.

• Verify and apply patches to prevent exploitation
• Assess and mitigate exposure in the environment
• Monitor for potential exploitation attempts

Technical summary

The Nokia MantaRay NM is vulnerable to a Relative Path Traversal vulnerability due to improper validation of input parameters on the file system in the Software Manager application. This vulnerability has a CVSS score of 5.7 and is classified as MEDIUM severity.

Defensive priority

Defenders should prioritize verifying and applying the vendor's patch for CVE-2025-24819, assessing exposure in their environment, and monitoring for potential exploitation attempts.

Recommended defensive actions

• Verify and apply the vendor's patch for CVE-2025-24819
• Assess exposure in the environment
• Monitor for potential exploitation attempts

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its CVSS score and vector. However, additional information on exploitation or impact is limited.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.