CVE-2019-10636

Severity Score

4.6

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, & 88SS1098) devices allow reprogramming flash memory to bypass the secure boot protection mechanism.

SSD Marvell Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, & 88SS1098) permiten la reprogramación de dispositivos flash memoria para omitir el mecanismo de protección de arranque seguro.

*Credits: N/A

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

Complete

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2019-03-29 CVE Reserved
2019-06-04 CVE Published
2023-03-08 EPSS Updated
2024-08-04 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-400: Uncontrolled Resource Consumption

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://www.marvell.com/documents/x9g4hrszt5ls3udbe1eo	2020-08-24

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Marvell Search vendor "Marvell"	88ss1074 Firmware Search vendor "Marvell" for product "88ss1074 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss1074 Search vendor "Marvell" for product "88ss1074"	-	-	Safe
Marvell Search vendor "Marvell"	88ss1079 Firmware Search vendor "Marvell" for product "88ss1079 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss1079 Search vendor "Marvell" for product "88ss1079"	-	-	Safe
Marvell Search vendor "Marvell"	88ss1080 Firmware Search vendor "Marvell" for product "88ss1080 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss1080 Search vendor "Marvell" for product "88ss1080"	-	-	Safe
Marvell Search vendor "Marvell"	88ss1093 Firmware Search vendor "Marvell" for product "88ss1093 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss1093 Search vendor "Marvell" for product "88ss1093"	-	-	Safe
Marvell Search vendor "Marvell"	88ss1092 Firmware Search vendor "Marvell" for product "88ss1092 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss1092 Search vendor "Marvell" for product "88ss1092"	-	-	Safe
Marvell Search vendor "Marvell"	88ss1095 Firmware Search vendor "Marvell" for product "88ss1095 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss1095 Search vendor "Marvell" for product "88ss1095"	-	-	Safe
Marvell Search vendor "Marvell"	88ss9174 Firmware Search vendor "Marvell" for product "88ss9174 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss9174 Search vendor "Marvell" for product "88ss9174"	-	-	Safe
Marvell Search vendor "Marvell"	88ss9175 Firmware Search vendor "Marvell" for product "88ss9175 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss9175 Search vendor "Marvell" for product "88ss9175"	-	-	Safe
Marvell Search vendor "Marvell"	88ss9187 Firmware Search vendor "Marvell" for product "88ss9187 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss9187 Search vendor "Marvell" for product "88ss9187"	-	-	Safe
Marvell Search vendor "Marvell"	88ss9188 Firmware Search vendor "Marvell" for product "88ss9188 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss9188 Search vendor "Marvell" for product "88ss9188"	-	-	Safe
Marvell Search vendor "Marvell"	88ss9189 Firmware Search vendor "Marvell" for product "88ss9189 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss9189 Search vendor "Marvell" for product "88ss9189"	-	-	Safe
Marvell Search vendor "Marvell"	88ss9190 Firmware Search vendor "Marvell" for product "88ss9190 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss9190 Search vendor "Marvell" for product "88ss9190"	-	-	Safe
Marvell Search vendor "Marvell"	88ss1085 Firmware Search vendor "Marvell" for product "88ss1085 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss1085 Search vendor "Marvell" for product "88ss1085"	-	-	Safe
Marvell Search vendor "Marvell"	88ss1087 Firmware Search vendor "Marvell" for product "88ss1087 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss1087 Search vendor "Marvell" for product "88ss1087"	-	-	Safe
Marvell Search vendor "Marvell"	88ss1090 Firmware Search vendor "Marvell" for product "88ss1090 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss1090 Search vendor "Marvell" for product "88ss1090"	-	-	Safe
Marvell Search vendor "Marvell"	88ss1100 Firmware Search vendor "Marvell" for product "88ss1100 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss1100 Search vendor "Marvell" for product "88ss1100"	-	-	Safe
Marvell Search vendor "Marvell"	88ss1084 Firmware Search vendor "Marvell" for product "88ss1084 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss1084 Search vendor "Marvell" for product "88ss1084"	-	-	Safe
Marvell Search vendor "Marvell"	88ss1088 Firmware Search vendor "Marvell" for product "88ss1088 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss1088 Search vendor "Marvell" for product "88ss1088"	-	-	Safe
Marvell Search vendor "Marvell"	88ss1098 Firmware Search vendor "Marvell" for product "88ss1098 Firmware"	-	-	Affected	in	Marvell Search vendor "Marvell"	88ss1098 Search vendor "Marvell" for product "88ss1098"	-	-	Safe