Nokia MantaRay NM contains a sudo-related privilege escalation vulnerability that allows a local administrator to achieve full root access on the underlying host.

This is a privilege escalation vulnerability involving the sudo utility. An authenticated local user who already possesses standard administrative (local admin) access can exploit this flaw to execute commands with root privileges.

Root-level access provides an attacker with complete control over the host system, allowing for the exfiltration of sensitive configuration data, installation of persistent backdoors, or destruction of system logs. With a CVSS score of 7.8, this flaw represents a significant risk to the security posture of the network management infrastructure.

Immediate Action: Update the Nokia MantaRay NM software to the latest patched version provided by the vendor.

Proactive Monitoring: Audit local account activity and sudo usage logs to detect unauthorized elevation attempts or irregular command execution by administrative users.

Compensating Controls: Implement the principle of least privilege by strictly limiting the number of users with local administrative rights on the host.

Public Exploit Available: false

Privilege escalation vulnerabilities are highly prized by attackers for lateral movement and persistence. Administrators should prioritize patching this vulnerability to prevent the escalation of local access into a full system compromise, thereby securing the management plane of the network.