CVE-2025-3773
Medium
Description
A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract sensitive information stored in a registry backup folder.
SeverityMedium
CVSS5.5
Exploit probability—
ProductTrellix System Information Reporter
PublishedJun 26, 2025
First seenJun 26, 2025
Weakness typeCWE-530CWE-530
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trellix system_information_reporter | v ≤ 1.0.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.