CVE-2025-24817

CVE-2025-24817 is an OS command injection vulnerability in the Symptom Collector application within Nokia MantaRay NM that allows attackers to execute arbitrary commands through improper sanitization of special elements in OS commands. The vulnerability is rated HIGH with a CVSS score of 8.0, indicating significant risk to affected systems. Attack exploitation requires adjacent network access and low-level privileges, but once exploited, results in complete compromise of confidentiality, integrity, and availability. The vulnerability currently shows minimal exploitation activity with an EPSS score of 0.00055, suggesting limited real-world weaponization at present. The moderate FAUCET Risk Score of 39.0 and absence from the KEV catalog indicate this is not yet a priority concern for widespread active exploitation, though organizations running Nokia MantaRay NM should still prioritize patching given the high severity rating.