Login Request a demo
Medium severity · published Jun 4, 2019
CVE-2019-10636
Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090,…
4.6
CVSS
0.3%
EPSS
No
On KEV
Description
Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, & 88SS1098) devices allow reprogramming flash memory to bypass the secure boot protection mechanism.
CVSS vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
8F
88ss1074 Firmware · Marvell
All versions, or not specified · source: NVD
8F
88ss1079 Firmware · Marvell
All versions, or not specified · source: NVD
8F
88ss1080 Firmware · Marvell
All versions, or not specified · source: NVD
8F
88ss1084 Firmware · Marvell
All versions, or not specified · source: NVD
8F
88ss1085 Firmware · Marvell
All versions, or not specified · source: NVD
8F
88ss1087 Firmware · Marvell
All versions, or not specified · source: NVD
8F
88ss1088 Firmware · Marvell
All versions, or not specified · source: NVD
8F
88ss1090 Firmware · Marvell
All versions, or not specified · source: NVD
8F
88ss1092 Firmware · Marvell
All versions, or not specified · source: NVD
8F
88ss1093 Firmware · Marvell
All versions, or not specified · source: NVD
8F
88ss1095 Firmware · Marvell
All versions, or not specified · source: NVD
8F
88ss1098 Firmware · Marvell
All versions, or not specified · source: NVD
Affected product
8F
88ss1074 Firmware
Marvell
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-10636
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-10636
Vendor Advisory
https://www.marvell.com/documents/x9g4hrszt5ls3udbe1eo/
More from 88ss1074 Firmware
4.6
CVE-2019-10637
Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090,…