CVE-2025-43991
Medium
Description
SupportAssist for Home PCs versions 4.8.2 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain an UNIX Symbolic Link (Symlink) following vulnerability. A low privileged attacker with local access to the system could potentially exploit this vulnerability to delete arbitrary files only in that affected system.
SeverityMedium
CVSS6.3
Exploit probability—
ProductDell Supportassist For Business Pcs
PublishedOct 13, 2025
First seenOct 13, 2025
Weakness typeCWE-61CWE-61
How to fix
Update
- dell supportassist_for_business_pcs4.5.3.25254 or later
- dell supportassist_for_home_pcs4.8.2.29006 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell supportassist_for_business_pcs | v < 4.5.3.25254 | 4.5.3.25254 |
| dell supportassist_for_home_pcs | v < 4.8.2.29006 | 4.8.2.29006 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.