CVE-2025-38746_CVE-2025-38746

3.5 / 10

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.

Basic Information

ID CVE-2025-38746

Source dell

Published Aug 6, 2025 at 19:53

Modified Aug 6, 2025 at 19:59

Affected Product

Vendor Dell

Product SupportAssist OS Recovery

Version N/A

Affected Versions Dell SupportAssist OS Recovery N/A

CWE Classification

CWE-200

References

www.dell.com /support/kbdoc/en-us/000353093/dsa-2025-315

{
    "lastseen": "",
    "description": "Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.",
    "published": "2025-08-06T19:53:05.549Z",
    "modified": "2025-08-06T19:59:14.486Z",
    "type": "cve",
    "title": "CVE-2025-38746",
    "source": "dell",
    "references": "https://www.dell.com/support/kbdoc/en-us/000353093/dsa-2025-315",
    "id": "CVE-2025-38746",
    "bulletinFamily": "",
    "cwe": [
        "CWE-200"
    ],
    "cvelist": null,
    "sourceData": "Dell SupportAssist OS Recovery N/A",
    "sourceHref": "",
    "cvss": {
        "score": 3.5,
        "severity": "LOW",
        "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "SupportAssist OS Recovery",
    "version": "N/A",
    "vendor": "Dell",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}