# 💯 CVSS Scoring System

Understanding the Common Vulnerability Scoring System (v3.1).

## 📝 The Raw Vector
`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

## 🕵️‍♂️ Investigation Steps

### Step 1: Attack Vector (AV)
* **AV:N (Network)**: The vulnerability can be exploited remotely over the internet. (BAD)
* **AV:P (Physical)**: You need to touch the device (USB). (Less critical).

### Step 2: Complexity & Privileges
* **AC:L (Low Complexity)**: A script kiddie can do it.
* **PR:N (None)**: No login required.
* **UI:N (None)**: No user interaction required.

### Step 3: CIA Impact
* **C:H (Confidentiality High)**: They steal all data.
* **I:H (Integrity High)**: They change all data.
* **A:H (Availability High)**: They delete everything.

### Score
* **9.8 CRITICAL**. Drop everything and patch this.
