Question

A vulnerability analyst is reviewing a scanner report that lists a vulnerability with the CVSS v3.1 vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. Management asks the analyst to explain what characteristic of this vulnerability most significantly increases the urgency of remediation. Which statement is the analyst's BEST response?

Accepted Answer

The vulnerability is exploitable remotely over a network without requiring authentication or user interaction, making mass exploitation feasible.

Answer

The vulnerability requires local physical access to the host, so remediation can be deferred until the next maintenance window.

Answer

The vulnerability only affects availability, so the primary concern is a potential denial-of-service condition.

Answer

The vulnerability results in a scope change, meaning exploitation is limited to the vulnerable component itself.