CVE-2025-3771

CVE-2025-3771 describes a path or symbolic-link manipulation vulnerability in Trellix System Information Reporter (SIR) version 1.0.3 and earlier. An authenticated non-admin local user can overwrite system files by adding a malicious entry to the Trellix SIR registry folder (or via policy) or by ...

CVE-2025-3773

CVE-2025-3773 affects Trellix System Information Reporter (SIR) version 1.0.3 and earlier. The vulnerability is a local, authenticated, non-admin information exposure where a user can extract sensitive data stored in a registry backup folder. Impact is described as sensitive information disclosur...

CVE-2025-3722

The CVE-2025-3722 entry describes a path traversal vulnerability in System Information Reporter (SIR) versions 1.0.3 and earlier. An authenticated, high-privileged user could issue malicious ePO post requests to SIR, enabling creation of files anywhere on the filesystem, with possible overwriting...