CVE-2025-7406: A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM
Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative (local admin) privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute actions as root. The risk can be temporarily mitigated by restricting the set of commands permitted via sudo for the affected accounts.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Temporarily mitigate the sudo privilege escalation by restricting the set of commands permitted via sudo for the affected accounts to a minimal allowlist (only permit required commands).
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7406?
CVE-2025-7406 has a high severity rating of 7.8.
How do I fix CVE-2025-7406?
To mitigate CVE-2025-7406, update to the latest version of Nokia MantaRay NM that addresses this vulnerability.
What type of vulnerability is CVE-2025-7406?
CVE-2025-7406 is a sudo privilege escalation vulnerability affecting Nokia MantaRay NM.
Who is affected by CVE-2025-7406?
Local attackers with administrative privileges on systems running Nokia MantaRay NM can exploit CVE-2025-7406.
What are the potential impacts of CVE-2025-7406?
Exploitation of CVE-2025-7406 can lead to full root access to the filesystem and execution of arbitrary commands.