🛡️ Security

Attack Vector (CVSS)

The CVSS base metric describing how far an attacker must be from the vulnerable component: Network, Adjacent, Local or Physical. It reflects the vendor's intended deployment, so an Adjacent-rated bug on an internet-exposed interface is effectively Network in practice.

📚 Deep Dive

Learn Article

Why a "LAN-Only" CVSS Rating Does Not Mean the Internet Cannot Reach It

The CVSS attack vector reflects how a vendor expects a product to be deployed, not where its interface actually listens. How Adjacent-rated bugs get exploited at scale and how to re-score them.

intermediate 5 min read

Back to Glossary