CVE-2025-24818 is an OS command injection vulnerability in Nokia MantaRay NM's Log Search application. The issue arises from improper neutralization of special elements used in OS commands, allowing an attacker with low privileges and no user interaction to execute arbitrary commands. The vulnerability affects versions earlier than 25R1-NM. The CVSS 3.1 vector indicates the attack requires adjacent network access, low complexity, low privileges, no user interaction, and impacts confidentiality, integrity, and availability with high severity. No patch or official remediation level has been published by Nokia as of the data provided.

Successful exploitation could allow an attacker with adjacent network access and low privileges to execute arbitrary OS commands on the affected system, potentially leading to full compromise of confidentiality, integrity, and availability of the device. This could disrupt operations or lead to unauthorized data access or modification.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Log Search application to trusted users and networks only. Monitor for unusual activity related to command execution. Avoid exposing the affected versions to untrusted networks.