Dell SupportAssist OS Recovery Insertion of Sensitive Information Vulnerability

A vulnerability exists in Dell SupportAssist OS Recovery versions prior to 5.5.15.0, allowing for the insertion of sensitive information into files or directories that are externally accessible. This issue could be exploited by a low-privileged attacker with local access, potentially leading to unauthorized information exposure.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information.

Remediation

Users can update to Dell SupportAssist OS Recovery version 5.5.15.0 or later. Instructions for verifying the current version and updating the application are available in the Dell Security Advisory DSA-2025-403.