CVE-2025-24817CWE-78command-injection

CVE-2025-24817

High · published April 7, 2026

CVSS v3.1
8.0
EPSS
1%
Percentile
62.7
In the wild
Unconfirmed
What it is

Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Symptom Collector application.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01006 · 62.7th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-04-07T20:16Z
Affected products (1)
ProductVersionsFixed in
nokia/mantaray_nm< 25r1-nm25r1-nm
References (1)
https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-24817/ · b48c3b8f-639e-4c16-8725-497bc411dad0
EPSS history
Timeline
  • 07 APR 15:09Z
    An OS Command Injection vulnerability in Nokia MantaRay NM
    cvelistv5