312-50V13 · Question #233
in the Common Vulnerability Scoring System (CVSS) v3.1 severity ratings, what range does medium vulnerability fall in?
The correct answer is C. 4.0-6.9. In the CVSS v3.1 severity ratings, a Medium vulnerability is assigned a Base Score ranging from 4.0 to 6.9, inclusive.
Question
Options
- A3.0-6.9
- B40-6.0
- C4.0-6.9
- D3.9-6.9
How the community answered
(28 responses)- A4% (1)
- C89% (25)
- D7% (2)
Why each option
In the CVSS v3.1 severity ratings, a Medium vulnerability is assigned a Base Score ranging from 4.0 to 6.9, inclusive.
A score of 3.0 falls into the 'Low' severity category, as Medium begins at 4.0.
This range includes an incorrect lower bound (40 instead of 4.0) and an incorrect upper bound (6.0 instead of 6.9).
According to the Common Vulnerability Scoring System (CVSS) v3.1 specification, a vulnerability with a Base Score between 4.0 and 6.9 (inclusive) is categorized as 'Medium' severity.
A score of 3.9 would still be considered 'Low' severity, as the Medium category starts at 4.0.
Concept tested: CVSS v3.1 severity ratings
Source: https://www.first.org/cvss/v3.1/specification-document
Topics
Community Discussion
No community discussion yet for this question.