The vulnerability is an OS command injection in the Symptom Collector application of Nokia MantaRay NM, arising from insufficient sanitization of special elements used in OS commands. This flaw allows an attacker to inject arbitrary commands into the underlying operating system, turning it into a remote code execution vector. If successfully exploited, the attacker could execute any system command with the privileges of the Symptom Collector process, potentially compromising confidentiality, integrity, or availability of the device.

The affected product is Nokia MantaRay NM. No specific firmware or software version ranges are cited in the available data. Administrators should review the Nokia security advisory linked above to determine whether their deployed versions are susceptible.

The CVSS score of 8 classifies the issue as High severity. The EPSS value of less than 1% indicates a low probability of exploitation under current conditions, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that exploitation would occur remotely through the Symptom Collector interface, requiring network access to the device. The path would involve submitting a crafted input that bypasses sanitization and triggers the underlying OS command execution.