CVE-2025-53398CWE-276

CVE-2025-53398

High · published December 17, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
1.7
In the wild
Unconfirmed
What it is

⚡ A hiccup in permissions could let anyone waltz into your system! The Portrait Dell Color Management app 3.3.8 for Dell monitors has insecure permissions that could be an open door for attackers! 🔥 Think of it like a party where the host forgets to check who enters, letting uninvited guests stroll in and access personal belongings without a second glance. It's a recipe for chaos! If an attacker exploits this vulnerability, they could gain access to sensitive files and modify system data, potentially leading to data theft or unwanted changes to your configurations. That's a fast track to a very bad day!

Put simply

Think of it like a party where the host forgets to check who enters, letting uninvited guests stroll in and access personal belongings without a second glance. It's a recipe for chaos! The issue stems from improper permissions set by the Portrait Dell Color Management application, allowing unauthorized users to access areas they shouldn't be able to. This can compromise system integrity and confidentiality.

What to do

If an attacker exploits this vulnerability, they could gain access to sensitive files and modify system data, potentially leading to data theft or unwanted changes to your configurations. That's a fast track to a very bad day! To safeguard your system, update the Portrait Dell Color Management application to the latest version that addresses these permissions issues. Additionally, review user permissions to ensure they align with best security practices. If you're unsure, consult the vendor's guidance on securing your installation. You've got this! With these steps, you'll have your security hero cape on in no time! 🦸‍♂️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00119 · 1.7th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2025-12-17T22:15Z
Affected products (1)
ProductVersionsFixed in
portrait/dell_color_management≤ 3.3.008—
References (2)
EPSS history
Timeline
  • 17 DEC 00:00Z
    The Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions,
    cvelistv5