CVE-2025-46636
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
Risk Assessment
The risk includes the possibility of data manipulation by a local attacker, potentially leading to information integrity compromise in the organization.
Recommendation
Update Dell Encryption to version 11.12.1 or later and restrict local access to the system.
Other vulnerabilities in Dell Encryption
Original NVD description (English source)
Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

