Nokia MantaRay NM OS Command Injection Vulnerability

An OS command injection vulnerability exists in Nokia MantaRay NM Log Search application, due to improper handling of special elements in OS commands. This vulnerability affects all MantaRay NM versions prior to 25R1-NM (exclusive).

Impact

Exploitation of this vulnerability allows for OS command injection, where an attacker can execute arbitrary commands on the server hosting the application.

Remediation

Users can upgrade to MantaRay NM Security Update SU1456 (available for 24R2-NM and 24R3-NM) or to version 25R1-NM or later.