Certified Ethical Hacker (CEH) Practice Question

In CVSS v3.1 the Attack Vector (AV) metric captures the attacker's required level of proximity to the vulnerable component. AV distinguishes whether exploitation can occur across a network, from an adjacent network, locally, or only with physical access. This distance directly affects the likelihood of attack and therefore strongly influences risk prioritization.

Privileges Required measures what access rights an attacker must already possess after reaching the target, not the distance to it. Confidentiality Impact evaluates the consequence of a successful exploit on data confidentiality, while Exploit Code Maturity is part of the Temporal metrics group rather than the Base metrics and reflects the availability of exploit code, not attacker proximity.