« Volver al listado

CVE-2025-24819

Estado: AnalizadaMedia (5.7)—

Nokia MantaRay NM is vulnerable to a Relative Path Traversal vulnerability due to improper validation of input parameter on the file system in Software Manager application.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Nokia — Mantaray NM

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-24819",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-24819",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-04-07T17:46:21.365319Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.7,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.1
      }
    ]
  },
  "affected": [
    {
      "source": "b48c3b8f-639e-4c16-8725-497bc411dad0",
      "affectedData": [
        {
          "vendor": "Nokia",
          "product": "MantaRay NM",
          "versions": [
            {
              "status": "affected",
              "version": "earlier than 25R1-NM (exclusive)"
            }
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-04-07T16:16:22.917",
  "references": [
    {
      "url": "https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-24819/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "b48c3b8f-639e-4c16-8725-497bc411dad0"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-23"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Nokia MantaRay NM is vulnerable to a Relative Path Traversal vulnerability due to improper validation of input parameter on the file system in Software Manager application."
    },
    {
      "lang": "es",
      "value": "Nokia MantaRay NM es vulnerable a una vulnerabilidad de salto de ruta relativo debido a la validación incorrecta del parámetro de entrada en el sistema de archivos en la aplicación Software Manager."
    }
  ],
  "lastModified": "2026-09-30T22:10:00.273",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nokia:mantaray_nm:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C678CD07-A42D-4168-8852-9C232E8DA11B",
              "versionEndExcluding": "25r1-nm"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "b48c3b8f-639e-4c16-8725-497bc411dad0"
}