A controller vulnerability for the municipal WLAN requires valid administrator credentials before it can be exploited. How should that affect remote risk relative to an unauthenticated wireless exploit?

Privileges required for exploitation are a primary factor in risk rating. Vulnerabilities that presuppose administrator credentials present different remote exposure than unauthenticated wireless exploits. Privilege requirements do not invalidate the CVE, but they change comparative risk versus unauthenticated paths.