Traversing the NVD

The NVD is the largest consortium of recorded vulnerabilities in the open source space. Navigating to https://nvd.nist.gov/vuln/search will bring you to the following screen:

Figure 4.18 – NVD

Now, search the CVE that we found earlier in Exploit DB for Rockwell SCADA. The CVE was 2016-2279. Type this CVE into the search input field and press Enter, and you will see the following screen:

Figure 4.19 – NVD CVE 2016-2279

Now, click on the link in the Vuln ID field we see shown in the results window, and you will see the following screen:

Figure 4.20 – CVE-2016-2279 details

There is a lot of information gathered and displayed here. Most notable are the systems affected and the risk score attached to them. Reviewing this data is important, as you will understand the depth and breadth of impact of discovering these controllers and the version of them operating in the customer...