CVE-2025-3771
highpriority · track · 28EPSS 0.002 · 5 %ileEUUSEPSS · scored 2026-10-22
A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite system files with SIR backup files, which can potentially cause a system crash. This was achieved by adding a malicious entry to the registry under the Trellix SIR registry folder or via policy or with a junction symbolic link to files that the user would not normally have permission to acces
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.1–7.2
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (2)
Products and version ranges known to be affected.
- trellix system information reporter≤ 1.0.3nvdUScpe:2.3:a:trellix:system_information_reporter:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (4)
External citations — patches, advisories, analysis.
- https://docs.trellix.com/zh-CN/bundle/system-information-reporter-release-notes/resource/system-information-reporter-release-notes.pdfPatchcnnvd
- https://thrive.trellix.com/s/article/000014635cnnvd
- https://thrive.trellix.com/s/article/000014635enisa_euvd
- https://thrive.trellix.com/s/article/000014635Permissions Requirednvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan