Known vulnerabilities in SupportAssist OS Recovery

Vendor: Dell
Software: SupportAssist OS Recovery
Software CPE: cpe:2.3:a:dell:supportassist_os_recovery:*:*:*:*:*:*:*:*
Website: https://www.delltechnologies.com/en-us/index.htm
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SupportAssist OS Recovery SupportAssist OS Recovery is affected by 4 known vulnerabilities: 1 high, 3 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113734 - Exposure of sensitive information to an unauthorized actor
CVE-2025-38746		 CWE-200 Low
No
No
 5.5.14.0 07.08.2025 SB2025080723
#VU113733 - Creation of Temporary File With Insecure Permissions
CVE-2025-38747		 CWE-378 Low
No
No
 5.5.14.0 07.08.2025 SB2025080723
#VU105166 - Improper Access Control
CVE-2025-0289		 CWE-284 High
No
Exploited
 5.5.13.2 28.02.2025 SB2025022879
SB20250520112
#VU62635 - Improper Authentication
CVE-2022-26865		 CWE-287 Low
No
No
 5.5.2 27.04.2022 SB2022042704