A security analyst is developing a script to filter firewall vulnerabilities. The script will impact the integrity of data hosted on devices connected to networks. Which of the following is a CVSS v4.

The correct answer is A. AV:L/AC:H/AT:N/PR:L/VI:H/VC:H/VA:H/SC:N/SI:N/SA:N. This CVSS v4.0 vector reflects a local attack (AV:L) requiring low privileges (PR:L) and has a high impact on integrity (VI:H) and high impact on confidentiality and availability (VC:H, VA:H). This matches the scenario where the script impacts data integrity on connected devices

Submitted by emma.c· Mar 6, 2026Vulnerability Management

Question

A security analyst is developing a script to filter firewall vulnerabilities. The script will impact the integrity of data hosted on devices connected to networks. Which of the following is a CVSS v4.0 that the analyst can use to test a true positive for the script?

Options

AAV:L/AC:H/AT:N/PR:L/VI:H/VC:H/VA:H/SC:N/SI:N/SA:N
BAV:N/AC:L/AT:N/PR:N/VI:N/VC:N/VA:N/SC:N/SI:H/SA:L
CAV:P/AC:L/AT:N/PR:H/VI:L/VC:L/VA:L/SC:N/SI:N/SA:N
DAV:A/AC:L/AT:N/PR:H/VI:N/VC:L/VA:L/SC:N/SI:N/SA:H

How the community answered

(56 responses)

A
63% (35)
B
23% (13)
C
9% (5)
D
5% (3)

Explanation

This CVSS v4.0 vector reflects a local attack (AV:L) requiring low privileges (PR:L) and has a high impact on integrity (VI:H) and high impact on confidentiality and availability (VC:H, VA:H). This matches the scenario where the script impacts data integrity on connected devices - indicating a valid true positive test case.

Topics

#CVSS v4.0#vulnerability scoring#data integrity#firewall vulnerabilities

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice