CVE-2019-10637 - CVE House
Back to Database
Status published Medium CVE-2019-10637

Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174,...

Vulnerability Description

Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, & 88SS1098) devices are vulnerable in manipulating a combination of IO pins to bypass the secure boot protection mechanism.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-10637

Credits & Attribution

No credits recorded in the NVD database.

References

More from marvell

View All →
CVE-2019-6496
The ThreadX-based firmware on Marvell Avastar Wi-Fi devices, models 88W8787,...
High 8.8
CVE-2019-13582
An issue was discovered in Marvell 88W8688 Wi-Fi firmware before...
Critical 9.8
CVE-2019-13581
An issue was discovered in Marvell 88W8688 Wi-Fi firmware before...
Critical 9.8
CVE-2019-10636
Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174,...
Medium 4.6
CVE-2015-5738
The RSA-CRT implementation in the Cavium Software Development Kit (SDK)...
High 7.5

Affected Vendor

Affected Software

88ss1074 firmware, 88ss1079 firmware, 88ss1080 firmware, 88ss1093 firmware, 88ss1092 firmware, 88ss1095 firmware, 88ss9174 firmware, 88ss9175 firmware, 88ss9187 firmware, 88ss9188 firmware, 88ss9189 firmware, 88ss9190 firmware, 88ss1085 firmware, 88ss1087 firmware, 88ss1090 firmware, 88ss1100 firmware, 88ss1084 firmware, 88ss1088 firmware, 88ss1098 firmware
Vulnerable Versions:
Unknown

Timeline

Official Publish: June 5th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.