CME-203
Network Segmentation (VLANs/Subnets)
Description
Separates network traffic into isolated segments by trust zone, preventing lateral movement between zones (e.g., DMZ, internal, management).
CVSS Vector Impacts
| Metric | Transition | Rationale |
|---|---|---|
| Attack Vector (AV) | N → A | Compromised host in one segment cannot directly reach other segments |
| Scope (S) | C → U | Blast radius limited to network segment |
CWE Relationships
Verification
Verify network topology shows segmentation between trust zones
$ ip addr show | grep -c 'inet '
# Expected: Multiple interfaces or VLANs
# Expected: Multiple interfaces or VLANs
Platform: linux