CVE-2025-46602 Details
Description
Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
A vulnerability exists in Dell SupportAssist OS Recovery versions prior to 5.5.15.0, allowing for the insertion of sensitive information into files or directories that are externally accessible. This issue could be exploited by a low-privileged attacker with local access, potentially leading to unauthorized information exposure.
Users can update to Dell SupportAssist OS Recovery version 5.5.15.0 or later. Instructions for verifying the current version and updating the application are available in the Dell Security Advisory DSA-2025-403.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 27, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.dell.com/support/kbdoc/en-us/000382443/dsa-2025-403 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-538 | Insertion of Sensitive Information into Externally-Accessible File or Directory | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| dell supportassist os recovery | < 5.5.15.0 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Nov 4, 2025 | Initial Analysis | [email protected] |
| Oct 27, 2025 | New CVE Received | [email protected] |