NVD Reading
Read NVD entries for description, CVSS, and references — analyst literacy from $LAB_HOST findings.
Visual · nvd_reading
NVD reading literacy. $LAB_HOST findings only. Original Cyberlium.
NVD is the analyst's reading room — not a exploit download aisle.
The National Vulnerability Database (NVD) publishes CVE records with description, CVSS v3.x scores, CWE mapping, CPE affected products, and reference links to vendor advisories. VA analysts read NVD to confirm scanner severity, understand prerequisites, and cite remediation — browsing nvd.nist.gov for CVEs tied to $LAB_HOST findings only. You will NOT scrape NVD to build attack chains on strangers, or treat reference links as mandatory exploit homework. Next: No PoC Required.
1. NVD fields analysts use first
Description: what fails and why. CVSS vector and base score: severity starting point (Module 6 deepens). References: vendor patch KB, CIS guidance — prefer vendor fix over random forum PoCs.
CPE strings match installed product/version on $LAB_HOST auth scan — confirm applicability before escalating.
Command guide
Try these commands — NVD fields analysts use first
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
NVD detail — https://nvd.nist.gov/vuln/detail/CVE-2021-44228 MITRE CVE API — https://cveawg.mitre.org/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install curl sudo apt install jq
macOS:
Command — copy this
brew install jq
Windows: Built-in (PowerShell: Invoke-WebRequest)
Command — copy this
choco install jq
═══ LINUX / macOS ═══
Command — copy this
curl -sS 'https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-44228' | jq '.vulnerabilities[0].cve.metrics.cvssMetricV31[0].cvssData.baseScore' curl -sS 'https://cveawg.mitre.org/api/cve/CVE-2021-44228' | jq '.containers.cna.title' 2>/dev/null | head -c 80
Primary tools to practice this lesson: curl, jq. Reference sites: NVD detail (https://nvd.nist.gov/vuln/detail/CVE-2021-44228); MITRE CVE API (https://cveawg.mitre.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Read, confirm, cite — defender voice
Scanner said CRITICAL — NVD may show lower environmental risk if unused service or compensating control exists on $LAB_HOST. Analyst notes: applicable Y/N, planned patch date.
Copying exploit references into class chat is harm — cite vendor advisory URL instead.
3. Lab note structure
CVE-ID, NVD URL, one-sentence description, base CVSS, vendor reference link, applicable to $LAB_HOST Y/N.
Ship: completed NVD read note for one $LAB_HOST CVE. Next: No PoC Required.
4. What you ship: NVD read note for one $LAB_HOST CVE
NVD URL, description summary, CVSS base, vendor ref. No exploit links required. chmod 600.
5. What you record before the next lesson
Date. NVD read note for $LAB_HOST CVE. File t18-m05-l02-nvd-reading.txt chmod 600.
6. Wrong vs right: stranger nets vs YOUR lab assets
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Paste exploit-db links as 'remediation.' Skip applicability check on $LAB_HOST.
- Right: Read NVD for $LAB_HOST CVE with vendor reference. Next: No PoC Required.
Mission: NVD read for lab finding
1) Open NVD for your $LAB_HOST CVE-ID. 2) Summarize description and base CVSS. 3) Copy vendor advisory reference — not PoC. Never exploit strangers to 'confirm' NVD.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor how to read CVSS vector line — not how to run public exploits.
APPLY: NVD primarily provides:
APPLY: True or False: NVD reference links include vendor advisories analysts should prefer.
APPLY: Scanner CRITICAL vs NVD reading on $LAB_HOST:
No PoC Required
Part of Vulnerability Assessment — CVE and NVD Literacy.
CVE Lab
Part of Vulnerability Assessment — CVE and NVD Literacy.
Quiz — CVE and NVD Literacy
Part of Vulnerability Assessment — CVE and NVD Literacy.