From the course: Cisco Certified CyberOps Associate (200-201) Cert Prep: 1 Security Concepts

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Interpreting CVSS metric groups

Interpreting CVSS metric groups

From the course: Cisco Certified CyberOps Associate (200-201) Cert Prep: 1 Security Concepts

Start my 1-month free trial

Interpreting CVSS metric groups

“

- [Instructor] The Common Vulnerability Scoring System is made up of three metric groups: Base, Temporal, and Environmental. Let's take a closer look at the metrics that contribute to the overall score. The Base Group represents the basic qualities of a vulnerability that are constant over time, and across user environments. The Base Group has two sub categories: the Exploitability Metrics and the Impact Metrics, the Exploitability Metrics and the Impact Metrics, but there's also the Scope or Authorization Scope. The Exploitability Metrics has a couple of components. The Access Vector is how the threat exploits the vulnerability, whether it's local or adjacent network, and how does it get to that vulnerability? The Attack Complexity is how easy or difficult is it for the threat to exploit the vulnerability. This could be high, medium, or low. Privileges Required describes how the threat gains access. Do they have to provide…

Contents