- Description
- Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.
- Source
- security_alert@emc.com
- NVD status
- Analyzed
- Products
- supportassist_os_recovery
CVSS 3.1
- Type
- Primary
- Base score
- 2.4
- Impact score
- 1.4
- Exploitability score
- 0.9
- Vector string
- CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Severity
- LOW
- security_alert@emc.com
- CWE-200
- Hype score
- Not currently trending
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:dell:supportassist_os_recovery:*:*:*:*:*:*:*:*",
"matchCriteriaId": "23BD8270-8E44-4B09-9C58-34B1C76D1AB8",
"versionEndExcluding": "5.5.14.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]