Given the following CVSS string:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Which of the following attributes correctly describes this vulnerability?
Given the following CVSS string:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Which of the following attributes correctly describes this vulnerability?
Based on the CVSS string provided (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), the attribute 'AV:N' indicates that the vulnerability is network-based. 'AV' stands for 'Attack Vector,' and 'N' signifies 'Network,' meaning that the vulnerability can be exploited over a network connection.
Analyzing string, observe: AV:N: vulnerability is network-based AC:L: attack complexity is low PR:N: privileges are not required to exploit the vulnerability UI:N: no user interaction required S:U: scope of the impact is unchanged (unchanged scope). C:H: confidentiality impact is high. I:H: integrity impact is high. A:H: availability impact is high.
B) vulnerability is network based. AV: N tells us the attack vector is done through the network. A is wrong. UI = N, so no user interaction is required. C is wrong. C = H, so confidentially is affected highly D is wrong. AC = L, so the attack complexity is low.
B. The vulnerability is network-based. Explanation: "AV:N" stands for "Attack Vector: Network," which indicates that the vulnerability is exploited over a network connection.
Attack vector is network based