CVSS v3.0 Severity and Metrics:
Base Score:
5.3 MEDIUM
Vector:
AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
(V3 legend)
Impact Score:
3.6
Exploitability Score:
1.6
Attack Vector (AV):
Network
Attack Complexity (AC):
High
Privileges Required (PR):
None
User Interaction (UI):
Required
Scope (S):
Unchanged
Confidentiality (C):
None
Integrity (I):
High
Availability (A):
None
CVSS v2.0 Severity and Metrics:
Base Score:
2.6 LOW
Vector:
(AV:N/AC:H/Au:N/C:N/I:P/A:N)
(V2 legend)
Impact Subscore:
2.9
Exploitability Subscore:
4.9
Access Vector (AV):
Network
Access Complexity (AC):
High
Authentication (AU):
None
Confidentiality (C):
None
Integrity (I):
Partial
Availability (A):
None
Additional Information:
Victim must voluntarily interact with attack mechanism
Allows unauthorized modification