Unrestricted File Upload in Nokia MantaRay NM

Executive Summary

CVE-2025-24815 is an unrestricted file upload vulnerability in Nokia MantaRay NM software. It occurs because the system does not properly validate the types of files being uploaded. This flaw allows an authenticated attacker to upload malicious files onto the system.

Useful 0 Not Useful 0

Impact Analysis

Exploitation of this vulnerability can lead to serious security risks including compromise of confidentiality, integrity, and availability of the affected system. An attacker could upload malicious files that might execute harmful actions, potentially disrupting system operations or gaining unauthorized access.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability in Nokia MantaRay NM allows authenticated attackers to upload malicious files due to insufficient file type validation, which poses high risks to confidentiality, integrity, and availability of the system.

Such risks could potentially impact compliance with common standards and regulations like GDPR and HIPAA, which require protection of sensitive data and system integrity to prevent unauthorized access and data breaches.

However, the provided information does not explicitly state the direct effects on compliance with these standards.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate the unrestricted file upload vulnerability in Nokia MantaRay NM, you should upgrade the software to version 25R2-NM or later, where the issue has been fixed.

Ensure that only authenticated users have access to upload functionality and monitor for any suspicious file uploads.

Useful 0 Not Useful 0