7.0
High
CVE-2025-22480 Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability
Description
Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary file deletion and Elevation of Privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell SupportAssist OS Recovery 5.5 | earliest → < 5.5.13.1 | 5.5.13.1 |