Exploit › Module 8 › Lesson 2
CVE Reading
CVE reading literacy — ID, CVSS, affected product, description, references; read for triage, not to build exploit from advisory text.
Visual · t24_cve_reading
CVE reading = parse advisory fields. Original Cyberlium.
Opening
A CVE tells defenders what broke and what to patch — reading one is not permission to weaponize it.
CVE (Common Vulnerabilities and Exposures) entries and vendor advisories provide structured fields: CVE-ID, description, affected versions, CVSS score vector, CWE mapping, references, patch version. Analyst literacy: extract bug class, affected component, fixed version, workaround — for patch prioritization and report writing (Module 9). Cyberlium teaches reading NVD/vendor pages for memory-safety CVEs linked to Module 2 classes — NOT mining CVE text for exploit development, NOT testing CVE PoCs against strangers, NOT treating 'public CVE' as authorization to attack. Practice on published patched CVEs with $PWN_LAB toy parallels: 'our toy had similar stack class — we fixed with flag X.' chmod 600 notes.
1. Fields to extract
CVE-ID, summary, affected product/version range, CVSS severity, CWE, fixed version, reference links.
Map description keyword to Module 2 class: buffer overflow, use-after-free, etc.
Command guide
Try these commands — Fields to extract
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
NVD — https://nvd.nist.gov/ (CVE JSON/search literacy) CWE-120 — https://cwe.mitre.org/data/definitions/120.html (map CVE to weakness) CWE-787 — https://cwe.mitre.org/data/definitions/787.html (out-of-bounds write)
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install curl sudo apt install python3
macOS:
Command — copy this
brew install python3
Windows: Built-in (PowerShell: Invoke-WebRequest) Download https://python.org/downloads/
═══ LINUX / macOS ═══
Command — copy this
export LAB_PWN=${LAB_PWN:-$HOME/cyberlium-lab/t24-pwn}
curl -sS 'https://nvd.nist.gov/vuln/search/results?query=CWE-120' | head -10
curl -sS https://cwe.mitre.org/data/definitions/120.html | grep -E 'Description|Related' | head -6
python3 -c "fields=['CVE ID','CWE','CVSS','description','references','patch']; print('CVE reading fields:', ', '.join(fields))"Primary tools to practice this lesson: curl, python3. Reference sites: NVD (https://nvd.nist.gov/); CWE-120 (https://cwe.mitre.org/data/definitions/120.html); CWE-787 (https://cwe.mitre.org/data/definitions/787.html). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Reading for defenders
Ask: Are we running affected version? Is patch deployed? Compensating control? Not: how do I exploit remotely.
Note publish date vs patch Tuesday cadence — next lesson.
3. Boundary
Refused: weaponized PoC from exploit-db as homework, scanning internet for vulnerable hosts.
Literacy: one CVE read sheet with remediation recommendation only.
4. What you ship: CVE reading worksheet
Field checklist + one worked example (patched CVE) + remediation line + refuse weaponize.
5. What you record before the next lesson
CVE reading worksheet path.
6. Wrong vs right: weaponized exploits vs memory-safety literacy
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Use CVE text to build exploit against neighbor's unpatched box.
Right
CVE reading worksheet for defender triage. Next: Patch Tuesday Mindset.
Mission: CVE reading worksheet
1) List eight CVE fields to extract. 2) Complete one worksheet on patched memory CVE. 3) Map to Module 2 class. 4) Remediation recommendation — no PoC.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “CVSS vs real org risk?”
Knowledge Check
APPLY: CVE reading on Cyberlium focuses on:
Multiple choice
Knowledge Check
APPLY: True or False: Public CVE authorizes attacking vulnerable hosts.
True or False
Knowledge Check
APPLY: CVE worksheet should end with:
Multiple choice