Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-43991

SupportAssist for Home PCs versions 4.8.2 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain an UNIX Symbolic Link (Symlink) following vulnerability. A

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

SupportAssist for Home PCs versions 4.8.2 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain an UNIX Symbolic Link (Symlink) following vulnerability. A low privileged attacker with local access to the system could potentially exploit this vulnerability to delete arbitrary files only in that affected system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell SupportAssist for Home PCs

Default version status: unaffected

  • N/A to < 4.10.1affected

Dell SupportAssist for Business PCs

Default version status: unaffected

  • N/A to < 4.9.0affected

References