4.4
Medium
CVE-2025-46602 Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into…
Description
Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SupportAssist OS Recovery 5.5 | earliest → < 5.5.15.0 | 5.5.15.0 |
Other CVEs of SupportAssist OS Recovery
The 4 CVEs of SupportAssist OS Recovery →
CVE-2025-46685
Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure…
7.5
High
CVE-2025-38746
Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an…
3.5
Low
CVE-2025-38747
Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure…
7.8
High