CVE-2025-53919

An issue was discovered in the Portrait Dell Color Management application through 3.3.008 for Dell monitors, It creates a temporary folder, with weak permissions, during installation and uninstallation. A low-privileged attacker with local access could potentially exploit this, leading to elevation of privileges.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://portrait.com/dell	Product
https://www.portrait.com/dell-security-cve-updates/	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:portrait:dell_color_management:*:*:*:*:*:*:*:*

History

13 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) Se descubrió un problema en la aplicación Portrait Dell Color Management hasta la versión 3.3.008 para monitores Dell. Esta crea una carpeta temporal, con permisos débiles, durante la instalación y desinstalación. Un atacante con pocos privilegios y acceso local podría potencialmente explotar esto, lo que llevaría a una elevación de privilegios.

Information

Published : 2025-12-17 17:15

Updated : 2026-10-13 11:10

NVD link : CVE-2025-53919

Mitre link : CVE-2025-53919

CVE.ORG link : CVE-2025-53919

JSON object : View

Products Affected

portrait

dell_color_management

CWE

CWE-276

Incorrect Default Permissions

{"id": "CVE-2025-53919", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-53919", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-17T19:34:24.155338Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-12-17T17:15:50.400", "references": [{"url": "https://portrait.com/dell", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://www.portrait.com/dell-security-cve-updates/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-276"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in the Portrait Dell Color Management application through 3.3.008 for Dell monitors, It creates a temporary folder, with weak permissions, during installation and uninstallation. A low-privileged attacker with local access could potentially exploit this, leading to elevation of privileges."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en la aplicaci\u00f3n Portrait Dell Color Management hasta la versi\u00f3n 3.3.008 para monitores Dell. Esta crea una carpeta temporal, con permisos d\u00e9biles, durante la instalaci\u00f3n y desinstalaci\u00f3n. Un atacante con pocos privilegios y acceso local podr\u00eda potencialmente explotar esto, lo que llevar\u00eda a una elevaci\u00f3n de privilegios."}], "lastModified": "2026-10-13T11:10:00.203", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:portrait:dell_color_management:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B946ED39-8CAA-4B23-AF91-915764C99543", "versionEndIncluding": "3.3.008"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}