CVE-2025-3773CWE-530

A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract…

published June 26, 2025

CVSS v4.0
0.0
EPSS
0%
Percentile
3.1
In the wild
Unconfirmed
What it is

A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract sensitive information stored in a registry backup folder.

The record
Technical detail
CVSS v4.0
0.0 · NONE
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00141 · 3.1th percentile
Weakness
CWE-530 · Exposure of Backup File to an Unauthorized Control Sphere
Published
2025-06-26T11:11Z
EPSS history
Timeline
  • 26 JUN 11:11Z
    A sensitive information exposure vulnerability in System Information Reporter (SIR) 1.0.3 and prior allows an authenticated non-admin local user to extract…
    cvelistv5