Nokia MantaRay NM OS Command Injection Vulnerability

An OS command injection vulnerability exists in Nokia MantaRay NM versions prior to 25R1-NM (exclusive). This vulnerability arises from improper handling of special elements in the Symptom Collector application, allowing for malicious manipulation of OS commands.

Impact

Exploitation of this vulnerability allows for OS command injection, where an attacker can execute arbitrary commands on the server running the application.

Remediation

Users can upgrade to MantaRay NM Security Update SU1456 (for 24R2-NM and 24R3-NM) or to version 25R1-NM or later.