CVE-2025-24817 identifies an OS command injection vulnerability in Nokia MantaRay NM's Symptom Collector application. The issue arises from improper neutralization of special characters used in operating system commands, potentially allowing an attacker to execute arbitrary OS commands. The vulnerability affects all versions earlier than 25R1-NM. No official patch or remediation guidance is currently documented, and no known exploitation has been reported.

If exploited, this vulnerability could allow an attacker to execute arbitrary operating system commands on the affected system, potentially leading to unauthorized actions or system compromise. However, no known exploits are reported, and the actual impact depends on the attacker's ability to reach and exploit the vulnerable component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Symptom Collector application and monitor for unusual activity related to OS command execution attempts. Avoid exposing the affected application to untrusted networks.