CVE-2025-7406
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A vulnerability in Nokia MantaRay NM allows a local attacker with local admin privileges to escalate to full root privileges on the host. Successful exploitation results in root-level filesystem access and the ability to execute actions as root.
Risk Assessment
The organization is at risk of complete system compromise by a privileged local user, potentially leading to data theft, configuration modification, or service disruption.
Recommendation
Restrict the set of commands permitted via sudo for affected accounts as a temporary mitigation. Apply the official vendor patch as soon as it becomes available.
Other vulnerabilities in Nokia MantaRay NM
See all- CVE-2025-24815High
Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker to upload malicious files onto the system.
- CVE-2025-24819Medium
Nokia MantaRay NM is vulnerable to a Relative Path Traversal vulnerability due to improper validation of input parameter on the file system in Software Manager application.
Original NVD description (English source)
Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative (local admin) privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute actions as root. The risk can be temporarily mitigated by restricting the set of commands permitted via sudo for the affected accounts.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS