Mod 5 · Les 1/5

Learn›Vulnerability Assessment›Module 5›Lesson 1

In progress

Module 5•Lesson 1 of 5•⏱️ 15 min read•Beginner+40 XP

CVE Named

Name CVE identifiers — map scanner findings to public records, no exploit PoCs required.

CVE Named• Audio Walkthrough

00:00/03:55

Visual · cve_named

CVE named literacy. NVD lookup. $LAB_HOST only. Original Cyberlium.

CVE-YYYY-NNNNN is a dictionary key for a known flaw — not a homework assignment to weaponize strangers.

Common Vulnerabilities and Exposures (CVE) assigns standardized IDs to publicly disclosed flaws. VA analysts map scanner plugin output and version checks to CVE IDs, then read NVD entries for description, CVSS, and references — remediation planning, not exploit development. Cyberlium teaches CVE vocabulary on findings from $LAB_HOST scans or sample rows — never hunting PoCs to drop on café Wi-Fi. You will NOT treat CVE lists as Metasploit shopping catalogs on classmate hosts. Next: NVD Reading.

1. What CVE identifiers mean

Format CVE-YYYY-NNNNN ties one issue to coordinated disclosure. Multiple vendors may share one CVE for the same flaw; scanners reference CVE in plugin text for analyst lookup.

On $LAB_HOST sample finding: note CVE ID, affected product/version from banner or auth scan — link to NVD next lesson.

Command guide

Try these commands — What CVE identifiers mean

═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)

MITRE CVE — https://cve.mitre.org NVD API — https://nvd.nist.gov/developers/vulnerabilities CWE — https://cwe.mitre.org

═══ INSTALL ═══

Linux (Debian/Ubuntu):

Command — copy this

sudo apt install curl
sudo apt install jq

macOS:

Command — copy this

brew install jq

Windows: Built-in (PowerShell: Invoke-WebRequest)

Command — copy this

choco install jq

═══ LINUX / macOS ═══

Command — copy this

curl -sS 'https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-44228' | jq '.vulnerabilities[0].cve.descriptions[0].value' | head -c 120
curl -sS 'https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-44228' | jq '.vulnerabilities[0].cve.id'

Primary tools to practice this lesson: curl, jq. Reference sites: MITRE CVE (https://cve.mitre.org); NVD API (https://nvd.nist.gov/developers/vulnerabilities); CWE (https://cwe.mitre.org). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.

2. CVE is literacy, not launch authorization

Knowing CVE-2021-44228 names Log4Shell does not authorize exploitation on stranger production. VA uses CVE to prioritize patches on assets you own and operate.

Sharing exploit code for 'CVE practice' on neighbors is out of scope — patch and compensate on $LAB_HOST lab services instead.

3. Analyst workflow on owned findings

Finding → CVE ID → NVD read → CVSS (Module 6) → owner assignment → patch/compensate. No PoC required for Cyberlium credit.

Ship: one sample finding row with CVE field for $LAB_HOST. Next: NVD Reading.

4. What you ship: CVE-named finding row for $LAB_HOST

Sample finding with CVE-ID, product, version from $LAB_HOST scope. No exploit steps. chmod 600.

5. What you record before the next lesson

Date. CVE ID example from $LAB_HOST finding. File t18-m05-l01-cve-named.txt chmod 600.

6. Wrong vs right: stranger nets vs YOUR lab assets

Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.

Wrong: Download PoC for every CRITICAL CVE and run on dorm hosts. Skip CVE field in triage notes.
Right: Document CVE naming on $LAB_HOST finding. Next: NVD Reading.

Hands-on Exercise

Mission: name CVE on a lab finding

1) Pick one scanner or sample finding on $LAB_HOST. 2) Record CVE-ID and affected product/version. 3) Note: remediation via patch — not exploit PoC. Never weaponize CVEs against strangers.

Pro Tip

Stuck? Ask Cyberlium AI Mentor

CVE ID is the bridge from scanner noise to NVD truth.

Practice QuizQuestion 1

Multiple choice

APPLY: CVE identifiers help VA analysts:

Practice QuizQuestion 2

True or False

APPLY: True or False: Knowing a CVE ID requires running exploit PoCs for Cyberlium credit.

Practice QuizQuestion 3

Multiple choice

APPLY: Mapping scanner output to CVE on Cyberlium uses: