Main Vulnerability Database Vulnerabilities #VU113734

#VU113734 Information disclosure in SupportAssist OS Recovery - CVE-2025-38746

Published: August 7, 2025

Vulnerability identifier: #VU113734

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2025-38746

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
SupportAssist OS Recovery

Software vendor:
Dell

Description

The vulnerability allows an attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. An attacker with physical access to the system can obtain sensitive data.

Install updates from vendor's website.