Certified Ethical Hacker (CEH v13) — Question 29

In the Common Vulnerability Scoring System (CVSS) v3.1 severity ratings, what range does medium vulnerability fall in?

Answer options

• A. 4.0-6.0
• B. 3.9-6.9
• C. 3.0-6.9
• D. 4.0-6.9

Correct answer: D

Explanation

The correct answer is D, as medium vulnerabilities are defined within the range of 4.0 to 6.9 in CVSS v3.1, making it the accurate classification. Options A and B are incorrect as they do not fully encompass the medium range, while option C incorrectly includes a lower threshold that is not part of the medium category.