A local attacker who already has administrative privileges on a Nokia MantaRay NM device can exploit a sudo misconfiguration to elevate to full root authority, granting unrestricted access to the host filesystem and the ability to perform any system actions. The flaw directly leads to a loss of confidentiality, integrity and availability because an attacker can modify critical system files, install persistent backdoors or disrupt network services. The weakness is a classic example of improper privilege assignment as documented by its CWE classification (CWE-269).

Nokia MantaRay NM devices are susceptible to this vulnerability. No specific firmware or software version range is provided, so all current releases should be evaluated against the conditions described. The issue exists wherever the affected administrative accounts are allowed to invoke sudo commands that are not adequately restricted.

The CVSS score is 7.8, indicating a high severity, while the EPSS score is less than 1%, suggesting a low likelihood of exploitation in general. Attack requires local administrative access and relies on a misconfigured sudo policy, making it readily exploitable on systems where such privilege levels are granted. Its presence provides an attacker with full system control, indicating a high-impact risk profile for any affected environment that has not applied mitigations or vendor patches.