- Home
- All questions
- Question 124
CompTIA Security+ study material · question 124 of 611
An exploit succeeds repeatably against any instance of a product with no target-specific work. What Attack Complexity value should it receive?
Show the answer
Answer: C. Low
Attack Complexity is High only when the attacker must evade a security-enhancing mechanism such as address space randomisation.
Source: CVSS v4.0 specification (FIRST) — CVSS v4.0 Specification Document › Attack Complexity (AC)