3 — Vulnerabilities by zone and by link
This step lets you check, for each zone and each link, the vulnerabilities found during the audit, from the V1 to V34 reference library organized into chapters.
Tab navigation
A tab is created for each zone (🏗️) and each link (🔗) in the project. Each tab shows a badge with the number of vulnerabilities already checked (highlighted if > 0).
Content of a zone tab
- An information bar recalls the zone type, its name and the number of checked vulnerabilities.
- Vulnerabilities are grouped by chapter (expandable/collapsible), with an
n/totalscore per chapter. - Each vulnerability row shows:
| Element | Description |
|---|---|
| Checkbox | Whether the vulnerability was found on this zone or not |
| Identifier | Code (e.g. V12) |
| Title | Short title of the vulnerability |
| Description | Details of the vulnerability |
| 🔧 Measure | Associated corrective measure, shown only if the box is checked |
Content of a link tab
Links only expose a restricted subset of the reference library, applicable at the network level (V5, V7, V20, V21), presented flat (without grouping by chapter). The information bar also indicates the link type and whether it is filtered.
Vulnerability summary
At the bottom of the page, a summary table crosses each zone (row) with each chapter of the reference library (column), showing the n/total score per cell and the total per zone. Links appear below with their total, without a per-chapter breakdown (V5/V7/V20/V21 only).
Why check vulnerabilities
The vulnerabilities checked here are the main driver of scenario generation: they determine the intrusion rules applicable when generating strategic scenarios (step 4) and the actions in the attack chain (step 5).