## 2 Background and Related Work
### Background
#### 2.1.2 Common Vulnerability Scoring System
A _Physical (P)_ vector, with a score of 0.29, represents scenarios where the attacker must physically interact with the device, as in a cold boot attack aimed at extracting encryption keys. This metric highlights that the broader the potential attack surface, the greater the number of potential attackers and the higher the severity score. * Attack Complexity (\(AC\)): This metric evaluates the level of difficulty an attacker faces in successfully exploiting a vulnerability, considering any conditions beyond the attacker's control. It has two possible values: _Low (L)_ and _High (H)_. A _Low (L)_ complexity, assigned a score of 0.77, implies that the exploit is straightforward, repeatable, and does not depend on specific conditions or defenses in the target environment. Conversely, a _High (H)_ complexity, valued at 0.44, indicates that the attacker must overcome additional barriers such as security mechanisms--e.g., Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP)--or must possess target-specific knowledge like cryptographic keys. Thus, a higher attack complexity reduces the likelihood of successful exploitation and leads to a lower severity score. * Privileges Required (\(PR\)): This metric quantifies the level of access privileges an attacker must possess prior to initiating an exploit. It includes three predefined values: _None (N)_, _Low (L)_, and _High (H)_. A _None (N)_ value, scored at 0.85, signifies
that the attack can be conducted without any prior access to the vulnerable system. A _Low_ (_L_) value, with a score of 0.62, indicates that basic user-level access is required. A _High_ (_H_) value, rated at 0.27, denotes that the attacker must already have elevated privileges such as administrative or root-level access. The more privileged access required, the less severe the vulnerability is considered to be. * The User Interaction (_UII_): This metric assesses whether the successful exploitation of a vulnerability depends on any user action. It has two possible values: _None_ (_N_) and _Required_ (_R_). A _None_ (_N_) value, scored at 0.85, indicates that no user involvement is needed--an attacker can exploit the vulnerability independently. In contrast, a _Required_ (_R_) value, assigned a score of 0.62, means that a user must perform an action (e.g., opening a malicious file or clicking a crafted link) to enable the attack. The required user interaction reduces exploitability and lowers the overall score. * Attack Requirements (_AT_): This metric evaluates whether specific conditions or unusual configurations, beyond the attacker's control, must be present on the vulnerable system for a successful exploit. It has two possible values: _None_ (_N_) and _Present_ (_P_). A _None_ (_N_) value, scored at 1.0, indicates that the vulnerability is exploitable under typical, default, or common configurations, requiring no special environmental factors for a successful attack. In contrast, a _Present_ (_P_) value, assigned a score of 0.90, means that successful exploitation depends on additional conditions, such as specific non-default configurations, unusual system states, or other prerequisites on the target. The presence of such requirements reduces the overall exploitability of the vulnerability and lowers the overall score. * Impact sub-score (ISS): This quantifies the consequences of a successfully exploited vulnerability. It considers the effect on confidentiality, integrity, availability, safety, and the automated process of the affected systems. The formula for calculating the ISS is given in Equation (2) (all equations, as well as the values specified below, are extracted from [14]): \[\text{ISS }=\ 1-(1-C)(1-I)(1-A)\] (2) * Confidentiality (_C_): This metric reflects the degree of information exposure resulting from a vulnerability. It has three possible values: _High_ (_H_), _Low_ (_L_), and _None_ (_N_). A _High_ (_H_) impact, valued at 0.56, indicates complete compromise of confidential information--e.g., all sensitive data is accessible.