Dell SupportAssist OS Recovery Temporary File Insecure Permissions Vulnerability Allowing Privilege Escalation

A vulnerability exists in Dell SupportAssist OS Recovery versions prior to 5.5.15.1, allowing low-privileged attackers with local access to create temporary files with insecure permissions. This could potentially be exploited to elevate privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Remediation

Users can update to Dell SupportAssist OS Recovery version 5.5.15.1 or later. To verify the current version, check the 'Programs and Features' section in the Control Panel. If the version is lower than 5.5.15.1, launch the Dell SupportAssist application, check for updates, and install the latest version.