CVE-2025-38746: Infoleak
Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38746?
CVE-2025-38746 is considered a moderate severity vulnerability as it allows for the exposure of sensitive information to an unauthorized actor.
How do I fix CVE-2025-38746?
To mitigate CVE-2025-38746, update Dell SupportAssist OS Recovery to version 5.5.14.0 or later.
What type of attack does CVE-2025-38746 facilitate?
CVE-2025-38746 could potentially allow an authenticated attacker with physical access to disclose sensitive information.
Who is affected by CVE-2025-38746?
CVE-2025-38746 affects users of Dell SupportAssist OS Recovery versions prior to 5.5.14.0.
Is physical access required to exploit CVE-2025-38746?
Yes, an attacker must have physical access to the system to exploit CVE-2025-38746.