Dell SupportAssist Privilege Escalation (DSA-2025-445)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(279409);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/02/20");

  script_cve_id("CVE-2025-46681");
  script_xref(name:"IAVA", value:"2025-A-0935");

  script_name(english:"Dell SupportAssist Privilege Escalation (DSA-2025-445)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Windows host contains a Dell SupportAssist installation affected by a local privilege escalation vulnerability.");
  script_set_attribute(attribute:"description", value:
"The remote Windows host contains an installation of Dell SupportAssist that is 
affected by an elevation of privilege vulnerability:

  - Dell SupportAssist for Home PCs (versions 4.8.2.29006 and prior) and Dell SupportAssist for Business 
  PCs (versions 4.9.0.40943 and prior) contain a UNIX Symbolic Link (Symlink) Following vulnerability. A low 
  privileged attacker with local access could potentially exploit this vulnerability by creating symbolic 
  links to point to files with higher permissions, leading to an elevation of privileges.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  # https://www.dell.com/support/kbdoc/en-vc/000402265/dsa-2025-445-security-update-for-dell-supportassist-for-home-pcs-and-dell-supportassist-for-business-pcs-vulnerability
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?82689d46");
  script_set_attribute(attribute:"solution", value:
"Update Dell SupportAssist for Home PCs to version 4.10.1 or later and Dell SupportAssist for Business PCs to version 4.9.0 or later.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:H/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-46681");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/12/16");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/12/16");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/12/19");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:dell:supportassist");
  script_set_attribute(attribute:"stig_severity", value:"II");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("dell_supportassist_installed.nbin");
  script_require_keys("installed_sw/Dell SupportAssist");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'requires': [{'scope': 'target', 'match': {'os': 'windows'}}],
  'checks': [
    {
      'product': {'name': 'Dell SupportAssist', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [
        {
          'max_version': '4.9.0.40943','fixed_version' : '4.9.1.48804',
          'requires': [
            {'scope': 'install', 'match': {'Edition': 'Business'}}
          ]
        },
        {
          'max_version': '4.8.2.29006','fixed_version' : '4.10.1.42635',
          'requires': [
            {'scope': 'install', 'match': {'Edition': 'Home'}}
          ]
        }
      ]
    }
  ]
};


var vdf_result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_WARNING);
vdf::handle_check_and_report_errors(vdf_result:vdf_result);