CVE-2025-46602

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-46602
Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

4.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000382443/dsa-2025-403 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:dell:supportassist_os_recovery:*:*:*:*:*:*:*:*
History

No history.

Information

Published : 2025-10-27 19:16

Updated : 2025-11-04 14:49

NVD link : CVE-2025-46602

Mitre link : CVE-2025-46602

CVE.ORG link : CVE-2025-46602

JSON object : View

Products Affected

dell

  • supportassist_os_recovery
CWE
CWE-538

Insertion of Sensitive Information into Externally-Accessible File or Directory