Redzone Security Advisory Bulletins (with CVSS-scores)

http://scp-wiki.wikidot.com/prometheus-labs-hub
Redzone Security Advisory Bulletins

Redzone Thingamajig Server Cromulator Vulnerability

CVSS Base Score: Critical (9.49)

CVSS Temporal Score: High (8.84)

Attack Vector: NetworkAttack Complexity: LowPrivileges Required: LowUser Interaction: NoneScope: ChangedConfidentiality Impact: HighIntegrity Impact: HighAvailability Impact: LowExploit Code Maturity: Functional exploit existsRemediation Level: UnavailableReport Confidence: Reasonable

---

[[include :topia:red-tr
|title=Redzone Thingamajig Server Cromulator Vulnerability
|AV=N
|AC=L
|PR=L
|UI=N
|S=C
|C=H
|I=H
|A=L
|E=F
|RL=U
|RC=R
]]

---

Redzone: 例のあのサーバーのクロム器の脆弱性

CVSS基本値: Low (1.79)

CVSS現状値: Low (1.63)

攻撃元区分: 物理攻撃条件の複雑さ: 高必要な特権レベル: 不要ユーザ関与レベル: 要スコープ: 変更なし機密性への影響: 低完全性への影響: なし可用性への影響: なし攻撃される可能性: 未実証利用可能な対策のレベル: 未評価脆弱性情報の信頼性: 確認済

---

[[include :topia:red-tr |lang=jp
|title=Redzone: 例のあのサーバーのクロム器の脆弱性
|AV=P
|AC=H
|PR=N
|UI=R
|S=U
|C=L
|I=N
|A=N
|E=U
|RL=X
|RC=C
]]

---

What is CVSS (v3.1)?

• https://www.first.org/cvss/v3.1/specification-document

---

lang: en (default), cn, ko, jp, fr, de, es, ptbr, zhtr

---

Attack Vector (AV):

• Network (N)
• Adjacent Network (A)
• Local (L)
• Physical (P)

Attack Complexity (AC):

• Low (L)
• High (H)

Privileges Required (PR):

• None (N)
• Low (L)
• High (H)

User Interaction (UI):

• None (N)
• Required (R)

Scope (S):

• Unchanged (U)
• Changed (C)

Confidentiality Impact (C):

• None (N)
• Low (L)
• High (H)

Integrity Impact (I):

• None (N)
• Low (L)
• High (H)

Availability Impact (A):

• None (N)
• Low (L)
• High (H)

Exploitability (E):

• Not Defined (X)
• Unproven that exploit exists (U)
• Proof of concept code (P)
• Functional exploit exists (F)
• High (H)

Remediation Level (RL):

• Not Defined (X)
• Official fix (O)
• Temporary fix (T)
• Workaround (W)
• Unavailable (U)

Report Confidence (RC):

• Not Defined (X)
• Unknown (U)
• Reasonable (R)
• Confirmed (C)