Back to Database
Status published
Medium
CVE-2019-10636
Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174,...
Vulnerability Description
Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, & 88SS1098) devices allow reprogramming flash memory to bypass the secure boot protection mechanism.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-10636
Credits & Attribution
No credits recorded in the NVD database.
More from marvell
View All →CVE-2019-6496
The ThreadX-based firmware on Marvell Avastar Wi-Fi devices, models 88W8787,...
High
8.8
CVE-2019-13582
An issue was discovered in Marvell 88W8688 Wi-Fi firmware before...
Critical
9.8
CVE-2019-13581
An issue was discovered in Marvell 88W8688 Wi-Fi firmware before...
Critical
9.8
CVE-2019-10637
Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174,...
Medium
4.6
CVE-2015-5738
The RSA-CRT implementation in the Cavium Software Development Kit (SDK)...
High
7.5
Affected Vendor
marvell
View all reports →Affected Software
88ss1074 firmware, 88ss1079 firmware, 88ss1080 firmware, 88ss1093 firmware, 88ss1092 firmware, 88ss1095 firmware, 88ss9174 firmware, 88ss9175 firmware, 88ss9187 firmware, 88ss9188 firmware, 88ss9189 firmware, 88ss9190 firmware, 88ss1085 firmware, 88ss1087 firmware, 88ss1090 firmware, 88ss1100 firmware, 88ss1084 firmware, 88ss1088 firmware, 88ss1098 firmware
Vulnerable Versions:
Unknown
Timeline
Official Publish:
June 4th, 2019
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.