The dangers of a single vulnerability can be assessed by the CVSS, but in some cases, comprehensive harm of several vulnerabilities is 1 + 1> 2. So evaluating multiple vulnerabilities that are not just many single vulnerability assessments, but also integrated many complex situations. This paper studies the vulnerability chain score, an assessment of the attack path and do penetration testing laboratories to prove the validity of the assessment.