A critical remote exploit targets internet-exposed cloud WLAN dashboards used by the municipality, while another AP bug is local-only on an isolated management VLAN. How should relative risk be rated?
Select an answer to reveal the explanation.
Short Explanation
Same CVE number on paper is not the same risk in the wild. A cloud dashboard hanging on the Internet is a bigger municipal target than a local-only AP glitch trapped on a locked-down management VLAN.
Full Explanation
Risk and impact depend on exposure path and reachability, not CVSS alone. Internet-facing cloud WLAN management interfaces present a broader attacker audience than local-only flaws on isolated management networks. Contextualizing reachability is core to Domain 2.1.2 determination of risk.