CS0-003 · Question #16
A recent zero-day vulnerability is being actively exploited, requires no user interaction or privilege escalation, and has a significant impact to confidentiality and integrity but not to…
The correct answer is A. CVSS:31/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L. The attack vector is network (AV:N), the attack complexity is low (AC:L), no privileges are required (PR:N), no user interaction is required (UI:N), the scope is unchanged (S:U), the confidentiality and integrity impacts are high (C:H/I:H), and the availability impact is low…
Question
A recent zero-day vulnerability is being actively exploited, requires no user interaction or privilege escalation, and has a significant impact to confidentiality and integrity but not to availability. Which of the following CVE metrics would be most accurate for this zero-day threat?
Options
- ACVSS:31/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
- BCVSS:31/AV:K/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L
- CCVSS:31/AV:N/AC:L/PR:N/UI:H/S:U/C:L/I:N/A:H
- DCVSS:31/AV:L/AC:L/PR:R/UI:R/S:U/C:H/I:L/A:H
How the community answered
(33 responses)- A61% (20)
- B24% (8)
- C3% (1)
- D12% (4)
Explanation
The attack vector is network (AV:N), the attack complexity is low (AC:L), no privileges are required (PR:N), no user interaction is required (UI:N), the scope is unchanged (S:U), the confidentiality and integrity impacts are high (C:H/I:H), and the availability impact is low (A:L).
Topics
Community Discussion
No community discussion yet for this question.