Mantaray Nm CVE-2025-24819

The CVSS vector CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N reveals a moderate real-world risk profile. Attack Vector Adjacent (AV:A) restricts exploitation to attackers on the same local network segment, and PR:L requires low-level authenticated access, both of which narrow the attack surface compared to remotely exploitable vulnerabilities. However, the Confidentiality impact is rated High (C:H), indicating that successful exploitation exposes sensitive file contents. The attack complexity is Low (AC:L), meaning exploitation does not require special conditions or timing. The integrity and availability impacts are None, so data modification and denial of service are not concerns. The CVSS base score of 5.7 (Medium) appropriately reflects this profile: the vulnerability is exploitable but requires both network proximity and prior authentication, limiting the threat to insiders or attackers who have already gained low-privilege access to the management network. This is a legitimate data exfiltration vector for path traversal in a management system, where configuration files, logs, and system metadata may contain sensitive information. Organizations should prioritize patching based on whether MantaRay NM is deployed in sensitive network segments and whether low-privilege local accounts have access.

An authenticated user with low-privilege access to the MantaRay NM management network (e.g., a junior network administrator or compromised service account) crafts a malicious file path parameter in a Software Manager file operation request using relative path sequences such as '../../../etc/passwd' or '../config/backup.tar.gz'. The vulnerable application processes this input without proper validation, resolving the relative path to system locations outside the intended application directory and returning the contents of sensitive files. No public exploit code has been identified, but the straightforward nature of path traversal attacks means proof-of-concept code could be developed with minimal effort once the vulnerable input parameter is identified through code review or reverse engineering.