Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
References
| Link | Resource |
|---|---|
| https://www.dell.com/support/kbdoc/en-us/000382443/dsa-2025-403 | Vendor Advisory |
Configurations
History
04 Nov 2025, 14:49
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dell supportassist Os Recovery
Dell |
|
| References | () https://www.dell.com/support/kbdoc/en-us/000382443/dsa-2025-403 - Vendor Advisory | |
| CPE | cpe:2.3:a:dell:supportassist_os_recovery:*:*:*:*:*:*:*:* |
27 Oct 2025, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-27 19:16
Updated : 2025-11-04 14:49
NVD link : CVE-2025-46602
Mitre link : CVE-2025-46602
CVE.ORG link : CVE-2025-46602
JSON object : View
Products Affected
dell
- supportassist_os_recovery
CWE
CWE-538
Insertion of Sensitive Information into Externally-Accessible File or Directory