Product:
SupportAssist OS Recovery
Summary
Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.4 | CVE-2025-46602 |
Exploitation
To exploit this vulnerability, an attacker with local access must have low privileges. They can access sensitive information that is improperly exposed in externally-accessible files or directories. This requires the attacker to interact with the system, making user interaction a necessary component of the exploitation process.
Affected Products
- SupportAssist OS Recovery: Versions prior to 5.5.15.0 are affected by a vulnerability that allows low privileged attackers to access sensitive information.
Mitigation
To mitigate this vulnerability, users should upgrade to SupportAssist OS Recovery version 5.5.15.0 or later. This update addresses the issue by ensuring that sensitive information is not improperly exposed in accessible files or directories.