CVE-2025-43991: supportassist for business pcs before 4.5.3.25254 (exclusive); +3 more affected products

Affected technology

supportassist for business pcs · before 4.5.3.25254 (exclusive)
dell

supportassist for home pcs · before 4.8.2.29006 (exclusive)
dell

SupportAssist for Home PCs · N/A to before 4.10.1
Dell

SupportAssist for Business PCs · N/A to before 4.9.0
Dell

Description’s affected range: versions 4.8.2 and prior and SupportAssist for Business PCs versions 4.5.3 and prior,

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A low privileged attacker with local access to the system could potentially exploit this vulnerability to delete arbitrary files only in that affected system. Vendor/CNA’s CVSS 3.1 assessment (base score 6.3/10) rates confidentiality impact as none; integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as none; integrity and availability impact as high.