CVE-2025-24816 — An Improper Access Control vulnerability in Nokia MantaRay NM

CVE-2025-24816

An Improper Access Control vulnerability in Nokia MantaRay NM PUBLISHED

Description (CNA)

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges.

Affected (CNA)

Vendor / product	Versions
Nokia / MantaRay NM	affected <25R2-NM; unaffected ≥25R2-NM

CWE

No CWE identifiers supplied.

References

https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2025-24816/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.