Nokia MantaRay NM has an OS command injection issue caused by improper handling of special characters in the Log Search application. An attacker could exploit this flaw to execute arbitrary system commands, potentially compromising the affected device’s confidentiality, integrity, and availability.

The vulnerability affects Nokia MantaRay NM. No specific firmware or release versions are provided, so all current installations of the product are potentially impacted.

The CVSS score of 8 indicates high severity. EPSS data is unavailable, and the flaw is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is remote exploitation through the Log Search interface, requiring network access and the ability to craft inputs containing special elements. The attacker could gain elevated privileges or control over the device, leading to full system compromise.