Under embargo until 2024-03-31T23:59:00+01:00
The Common Vulnerability Scoring System (CVSS) is a free and open industry standard for assessing the severity of computer system security vulnerabilities. CVSS assigns severity scores to vulnerabilities, allowing prioritisation of response resources according to the level of threat. Scores are calculated based on a formula that depends on several metrics that measure ease of exploit and the impact of an exploit. The CVSS “Base” Scores (identified since v4 of the definition), or CVSS-B, range from 0 to 10 with 10 being the most severe.
Until today, that is.
The new CVSS-B scale runs from 0 to 11, because things have just been getting so bad that 10.0 no longer conveys the sheer level of carnage, destruction and loss-of-sleep regularly inflicted upon purchasers and/or users of products containing basic n00b-level coding errors and desperately poor software lifecycle management and supply chain assurance by manufacturers.
There is an argument for re-scaling and still having 10.0 as the top of the scale. However, as Nigel Tufnel[2] famously said, “But… these go up to eleven”.
This change is not without precedent; as well as Spın̈al Tap, there is the BBC iPlayer, which clearly offers a better experience over other streaming applications because it, too, goes up to 11. And the IMDB too, of course.
CVSS-B 11.0 Rated Vulnerability
No doubt it will be a short-lived race to be the first product to achieve the prestigious, and no doubt much sought-after, CVSS-B 11.0 rated vulnerability[3]. I can hardly wait. Nor can the legion hordes of over-burdened sleep-deprived techies world-wide as they take the calls at Stupid O’Clock in the wee small hours, ending the calls, most likely á la Malcolm Tucker.
Have a nice day now! 😑
Footnotes & Exploding Drummer
[1] What The F**K: Also known variously around the world as “Warm Up The Missile Silos”, “Shit Hitting The Fan Right Now”, “Brown Trouser Time”, “If You Can’t Take a Joke You Should Never Have Joined”, “SNAFU”, and “FUBAR BUNDY”.
[2] Lead Vocals, Spın̈al Tap
[3] Looks like Microsoft may be making a serious attempt to claim this crown. A bold and brave move on their part, methinks.
Gânduri Eclectice - Eclectic Thoughts 