Interpreting Advisory Notices and CVE ICSSCADA Practice Questions (Page 8)

Questions 36–36

1. 36application · medium

   A vendor advisory for a building automation controller mentions 'CVE-2023-4567' and 'CVE-2023-4568' in its references. The advisory provides a single firmware update that addresses both. A facility manager wants to verify that the update actually resolves both vulnerabilities. What is the most reliable way to confirm this?

   • AAssume the update addresses both because the advisory mentions them in the references section.
   • BSearch the CVE database for the vulnerability descriptions and match them to the advisory's affected products.
   • CCross-reference the advisory's remediation section with the CVE records to confirm both CVEs are listed as addressed by the update.
   • DCheck the CVSS scores of both CVEs; if they are both high, the update must address them.
   Reveal Solution Discussion Select an answer first