Pick the CVSS Attack Vector

About this interactive

The attack vector is the first base metric in CVSS, and it has the same four values in versions 3.1 and 4.0. It asks one thing: where does the attacker have to be? Network: the flaw can be reached across the network, through routers, up to the whole internet. This is often called remotely exploitable, and it scores highest. Adjacent: the attack reaches the system through the network, but only from close by: the same Wi-Fi or Bluetooth range, or the same local subnet, because the traffic it needs does not cross a router. Local: the flaw is not reached through the network at all. The attacker works on the system itself, at its keyboard or console or in a session they already have, such as SSH, or gets a legitimate user to run or open something for them. Physical: the attacker has to touch the device: open it, plug something into it, or hold it in their hand. The video describes local as being on the network, perhaps as an insider. In CVSS, being on the same network segment is adjacent; local means working on the system itself or through a user who does. A quick test for each card: does the attack cross routers, stay on the local network, run on the system itself, or need hands on the hardware?

What you'll learn

Choose the CVSS attack vector value (network, adjacent, local or physical) from where an attacker has to be to exploit a flaw
Tell local from adjacent: local means the console, an existing session or a tricked user, not simply being on the same network

Aligned to

CompTIA Security+

4.3 Explain various activities associated with vulnerability management.

CompTIA CySA+

2.3 Given a scenario, analyze data to prioritize vulnerabilities.

Key terms

Common Vulnerability Scoring System: Common Vulnerability Scoring System is an open industry standard that provides a numerical score from 0 to 10 representing the severity of a vulnerability, enabling organizations to prioritize remediation efforts based on base, temporal, and environmental metrics.
Vulnerability: A weakness in a system, application, or process that can be exploited by a threat actor.
Physical Access: Direct physical contact with IT equipment or facilities that can allow an attacker to bypass logical security controls or cause damage to infrastructure.

Topics

Vulnerability Management Cvss Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →