Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA CySA+ Cybersecurity Analyst · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I'm seeing B and C are closely related because the main reason why score elevated is due to changes in CVSS base values, perhaps AC from H to L as well as UI from R to N. But one can also argue that these changes are the direct result of weaponized code being widely available for threat actors to use.
The most likely reason for the escalation of the CVE's vulnerability score is B. Weaponization.
Weaponization is a factor that describes how an adversary develops or acquires an exploit or payload that can take advantage of a vulnerability and deliver a malicious effect. Weaponization can increase the severity or impact of a vulnerability, can also indicate the level of sophistication or motivation of an attacker, as well as the availability or popularity of an exploit or payload in the cyber threat landscape.