Study. uk . com
  1. Home
  2. All questions
  3. Question 126

CompTIA Security+ study material · question 126 of 611

A device ships with the same default administrator password across every unit, and it is rarely changed. How should Privileges Required be scored?

  1. Low, because a basic account is needed
  2. High, because administrative access is needed
  3. None, because such credentials are treated like hard-coded ones
  4. It cannot be scored without knowing the deployment
Show the answer

Answer: C. None, because such credentials are treated like hard-coded ones

Unchanged, non-unique default credentials are treated the same as hard-coded credentials, so no privilege is required.

Source: CVSS v4.0 specification (FIRST) — CVSS v4.0 Specification Document › Privileges Required (PR)

Challenge yourself on this topic → Study as cards