DSA-2025-403: Security Update for Dell SupportAssist OS Recovery for an Insertion of Sensitive Information into Externally Accessible File or Directory Vulnerability
概要: Dell SupportAssist OS Recovery remediation is available for an Insertion of Sensitive Information into Externally Accessible File or Directory vulnerability that could be exploited by malicious users to compromise the affected system. ...
この記事は次に適用されます：
この記事は次には適用されません：
この記事は、特定の製品に関連付けられていません。
すべての製品パージョンがこの記事に記載されているわけではありません。
影響
Medium
詳細
|
Proprietary Code CVE |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025- 46602 |
Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. |
4.4 |
|
Proprietary Code CVE |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025- 46602 |
Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. |
4.4 |
影響を受ける製品と修復
|
Product |
Affected Versions |
Remediated Versions |
Release date (MM/DD/YYYY) |
Link |
|
Dell SupportAssist OS Recovery |
Versions prior to 5.5.15.0 |
Version 5.5.15.0 or later |
10/24/2025 |
|
Product |
Affected Versions |
Remediated Versions |
Release date (MM/DD/YYYY) |
Link |
|
Dell SupportAssist OS Recovery |
Versions prior to 5.5.15.0 |
Version 5.5.15.0 or later |
10/24/2025 |
Dell SupportAssist OS Recovery application assists in Disk Cloning, Reset, Repair functions.
To verify your device is running the remediated version of Dell SupportAssist OS Recovery, follow below steps:
- During boot, press F12 to enter boot settings.
- Select the SupportAssist OS Recovery option in boot menu.
- On load, in splash screen or from the About menu, verify the version information in the launched application.
- If version is 5.5.15.0 or later, then your device is running the remediated version.
OR
- Goto Control Panel -> Programs and Features.
- Check the version information for Dell SupportAssist Remediation.
- If version is 5.5.15.0 or later, then your device is running the remediated version.
If the version is lower than 5.5.15.0 version, please follow below steps to install the 5.5.15.0 version or later:
- Launch Dell SupportAssist OS Recovery application from Windows Start menu.
- Click on Update Software in Home page.
- Select the checkbox for “Check for Updates”.
- Click on Start button to install update.
変更履歴
|
Revision |
Date |
Description |
|
1.0 |
2025-10-27 |
Initial Release |
確認
CVE-2025-46602: Dell Technologies would like to thank Marius Gabriel Mihai for reporting this issue.
関連情報
法的免責事項
対象製品
SupportAssist OS Recovery文書のプロパティ
文書番号: 000382443
文書の種類: Dell Security Advisory
最終更新: 27 10月 2025
質問に対する他のDellユーザーからの回答を見つける
サポート サービス
お使いのデバイスがサポート サービスの対象かどうかを確認してください。