3.5
Low
CVE-2025-38746 Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an…
Description
Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SupportAssist OS Recovery 5.5 | earliest → < 5.5.14.0 | 5.5.14.0 |
Other CVEs of SupportAssist OS Recovery
The 4 CVEs of SupportAssist OS Recovery →
CVE-2025-46685
Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure…
7.5
High
CVE-2025-46602
Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into…
4.4
Medium
CVE-2025-38747
Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure…
7.8
High