cehv11 vulnerability assessment