From the course: ISC2 Systems Security Certified Practitioner (SSCP) (2024) Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

CVSS

CVSS

From the course: ISC2 Systems Security Certified Practitioner (SSCP) (2024) Cert Prep

Start my 1-month free trial Buy for my team

CVSS

“

- [Instructor] Let's dig into the Common Vulnerability Scoring System, or CVSS, because you'll see that used on scan reports. CVSS assigns a score to each vulnerability on a 10-point scale. We can figure out a base CVSS score by evaluating eight different metrics and then combining the results. The first metric is the Attack Vector metric. This describes the type of access that an attacker must have to exploit a vulnerability. The value for this metric can be physical, meaning that the attacker must be able to physically touch or manipulate the target system. It can be local, meaning that the attacker must have physical or logical access to the system's console, or it can be adjacent network, meaning that the attacker must have access to the system's local network, or it can just be network, meaning that the vulnerability is remotely exploitable. The second metric is the Attack Complexity metric. This metric measures…

Contents