DSA-2025-051: Security Update for Dell SupportAssist OS Recovery for a Symbolic Link Attack Vulnerability
요약: Dell SupportAssist OS Recovery remediation is available for a Symbolic Link Attack Vulnerability that could be exploited by malicious users to compromise the affected system.
이 문서는 다음에 적용됩니다.
이 문서는 다음에 적용되지 않습니다.
이 문서는 특정 제품과 관련이 없습니다.
모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.
영향
High
세부 정보
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-22480 |
Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary file deletion and Elevation of Privileges. |
7.0 |
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-22480 |
Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary file deletion and Elevation of Privileges. |
7.0 |
영향을 받는 제품 및 문제 해결
|
Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Release Date |
Link |
|
Dell SupportAssist OS Recovery |
Software |
Versions prior to 5.5.13.1 |
Versions 5.5.13.1 or later |
02/04/2025 |
|
Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Release Date |
Link |
|
Dell SupportAssist OS Recovery |
Software |
Versions prior to 5.5.13.1 |
Versions 5.5.13.1 or later |
02/04/2025 |
Dell SupportAssist OS Recovery auto-updates to the latest version. To verify the version, please follow the steps:
- Go to Control Panel.
- Programs -> Programs and Features.
- Find "Dell SupportAssist Remediation" and "Dell SupportAssist OS Recovery Plugin".
- Verify that the version of these programs is 5.5.13.1 or later.
Alternatively, if the Dell SupportAssist OS Recovery is launched, please check the version from “About” on the application.
For more info, please refer to https://www.dell.com/support/kbdoc/en-sc/000197387/how-to-identify-the-dell-supportassist-os-recovery-version
해결 방법 및 완화 방안
None
개정 내역
|
Revision |
Date |
Description |
|
1.0 |
2025-02-13 |
Initial Release |
감사의 말
CVE-2025-22480 : Dell Technologies would like to thank mdanilor for reporting this issue.
관련 정보
법적 고지 사항
해당 제품
SupportAssist OS Recovery문서 속성
문서 번호: 000275712
문서 유형: Dell Security Advisory
마지막 수정 시간: 13 2월 2025
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.