CVE-2019-10636

Published: Jun 4, 2019Modified: Nov 21, 2024

4.6

Vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 0.9 / Impact: 3.6

Source: NVD

Description

Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, & 88SS1098) devices allow reprogramming flash memory to bypass the secure boot protection mechanism.

Affected (19)

Products: Marvell: 88ss1074 Firmware, 88ss1079 Firmware, 88ss1080 Firmware, 88ss1093 Firmware, 88ss1092 Firmware, 88ss1095 Firmware, 88ss9174 Firmware, 88ss9175 Firmware, 88ss9187 Firmware, 88ss9188 Firmware, 88ss9189 Firmware, 88ss9190 Firmware, 88ss1085 Firmware, 88ss1087 Firmware, 88ss1090 Firmware, 88ss1100 Firmware, 88ss1084 Firmware, 88ss1088 Firmware, 88ss1098 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss1074 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss1074	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss1079 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss1079	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss1080 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss1080	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss1093 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss1093	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss1092 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss1092	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss1095 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss1095	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss9174 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss9174	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss9175 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss9175	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss9187 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss9187	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss9188 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss9188	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss9189 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss9189	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss9190 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss9190	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss1085 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss1085	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss1087 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss1087	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss1090 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss1090	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss1100 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss1100	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss1084 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss1084	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss1088 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss1088	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Marvell 88ss1098 Firmware	All versions

Running on/with	Platform Versions
Marvell 88ss1098	All versions

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (2)

https://www.marvell.com/documents/x9g4hrszt5ls3udbe1eo/

Source: cve@mitre.org

Vendor Advisory

https://www.marvell.com/documents/x9g4hrszt5ls3udbe1eo/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.