Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Create and access a list of your products
Sign In Create an Account Premier Sign In Partner Program Sign In
Contact Us

DSA-2025-051: Security Update for Dell SupportAssist OS Recovery for a Symbolic Link Attack Vulnerability

Summary: Dell SupportAssist OS Recovery remediation is available for a Symbolic Link Attack Vulnerability that could be exploited by malicious users to compromise the affected system.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Impact

High

Details

Proprietary Code CVEs

Description

CVSS Base Score

CVSS Vector String

CVE-2025-22480

Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary file deletion and Elevation of Privileges.

7.0

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.

 

Proprietary Code CVEs

Description

CVSS Base Score

CVSS Vector String

CVE-2025-22480

Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary file deletion and Elevation of Privileges.

7.0

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

Product

Software/Firmware

Affected Versions

Remediated Versions

Release Date

Link

Dell SupportAssist OS Recovery

Software

Versions prior to 5.5.13.1

Versions 5.5.13.1 or later

02/04/2025

SupportAssist

 

Product

Software/Firmware

Affected Versions

Remediated Versions

Release Date

Link

Dell SupportAssist OS Recovery

Software

Versions prior to 5.5.13.1

Versions 5.5.13.1 or later

02/04/2025

SupportAssist

 

Dell SupportAssist OS Recovery auto-updates to the latest version. To verify the version, please follow the steps:

  1. Go to Control Panel.
  2. Programs -> Programs and Features.
  3. Find "Dell SupportAssist Remediation" and "Dell SupportAssist OS Recovery Plugin".
  4. Verify that the version of these programs is 5.5.13.1 or later.

Alternatively, if the Dell SupportAssist OS Recovery is launched, please check the version from “About” on the application.

For more info, please refer to https://www.dell.com/support/kbdoc/en-sc/000197387/how-to-identify-the-dell-supportassist-os-recovery-version

Workarounds & Mitigations

None

Revision History

Revision

Date

Description

1.0

2025-02-13

Initial Release

 

Acknowledgements

CVE-2025-22480 : Dell Technologies would like to thank mdanilor for reporting this issue.

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Legal Disclaimer

Affected Products

SupportAssist OS Recovery
Article Properties
Article Number: 000275712
Article Type: Dell Security Advisory
Last Modified: 13 Feb 2025
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.