Sudo Privilege Escalation in Nokia MantaRay NM

Executive Summary

CVE-2025-7406 is a sudo privilege escalation vulnerability in Nokia MantaRay NM software. It allows a local attacker who already has administrative (local admin) privileges to escalate their access to full root privileges on the host system.

Successful exploitation of this vulnerability grants the attacker root-level access to the filesystem and the ability to execute actions as the root user.

Affected versions include MantaRay NM 25R1-NM and earlier, and a fix is available in MantaRay NM 25R2-NM and later releases.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have a significant impact because it allows an attacker with local administrative privileges to gain full root access on the affected system.

• Root-level access enables the attacker to fully control the filesystem.
• The attacker can execute any commands or actions as the root user, potentially compromising system integrity and security.
• This could lead to unauthorized changes, data breaches, or disruption of services.

A temporary mitigation is to restrict the set of commands permitted via sudo for affected accounts until a patch is applied.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability affects Nokia MantaRay NM software versions 25R1-NM and earlier, where a local attacker with administrative privileges can escalate to root privileges.

To detect if your system is vulnerable, you can check the installed version of MantaRay NM to see if it is 25R1-NM or earlier.

• Run a command to check the installed version, for example: sudo mantaray_nm --version
• Review sudoers configuration to identify accounts with unrestricted sudo command permissions that could be exploited.
• Use commands like: sudo -l -U <username> to list allowed sudo commands for affected accounts.

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation involves restricting the set of commands permitted via sudo for the affected accounts to reduce the risk of privilege escalation.

Additionally, upgrading Nokia MantaRay NM software to version 25R2-NM or later, where the vulnerability is fixed, is recommended as a permanent solution.

Useful 0 Not Useful 0