According to CVSS, what is attack complexity?

Question

Options

• Aexisting exploits available in the wild exploiting the vulnerability
• Bexisting circumstances beyond the attacker's control to exploit the vulnerability
• Cnumber of actions an attacker should perform to exploit the vulnerability
• Dnumber of patches available for certain attack mitigation and how complex the workarounds are

• A
  3% (1)
• B
  90% (27)
• C
  3% (1)
• D
  3% (1)

Explanation

In the Common Vulnerability Scoring System (CVSS), attack complexity refers to the conditions beyond the attacker's control that must exist for the vulnerability to be successfully exploited. This includes factors such as the need for user interaction, the presence of specific configurations, or network conditions that are not easily controlled by the attacker. A high attack complexity means that these external factors make exploitation more difficult, while a low attack complexity indicates that fewer such conditions are required.

No community discussion yet for this question.