ECSA v10: EC-Council Certified Security Analyst v10

After conducting penetration testing, Russel, a penetration tester, wants to create a report that provides management with details of the testing process and the vulnerability findings. Russel uses the commonly available vulnerability-scoring framework, Common Vulnerability Scoring System (CVSS) v3.0 ratings, to grade the severity and risk level of identified vulnerabilities in the report. For a specific SMB-based vulnerability, Russel assigned a score of 8.7.

What risk or severity level does CVSS v3.0 assign to the SMB vulnerability for this score?