Product:
SupportAssist OS Recovery
Summary
Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.6 | CVE-2025-46684 |
Exploitation
To exploit this vulnerability, an attacker with local access can create temporary files with insecure permissions. By manipulating these files, the attacker can tamper with information, potentially leading to unauthorized changes or access to sensitive data.
Affected Products
- SupportAssist OS Recovery: Affected versions prior to 5.5.15.1 are vulnerable to information tampering due to insecure file permissions.
Mitigation
To mitigate this vulnerability, users should update their SupportAssist OS Recovery to version 5.5.15.1 or later. This update addresses the insecure permissions issue and enhances the overall security of the application.