CVEvulnerability

CVE-2019-10636

4.6 MEDIUM Published 2019-06-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-06-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.6 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:C/A:N
Weaknesses
CWE-400

Description

Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, & 88SS1098) devices allow reprogramming flash memory to bypass the secure boot protection mechanism.

Affected configurations

• marvell 88ss1074 firmware • marvell 88ss1079 firmware • marvell 88ss1080 firmware • marvell 88ss1093 firmware • marvell 88ss1092 firmware • marvell 88ss1095 firmware • marvell 88ss9174 firmware • marvell 88ss9175 firmware • marvell 88ss9187 firmware • marvell 88ss9188 firmware • marvell 88ss9189 firmware • marvell 88ss9190 firmware • marvell 88ss1085 firmware • marvell 88ss1087 firmware • marvell 88ss1090 firmware • marvell 88ss1100 firmware • marvell 88ss1084 firmware • marvell 88ss1088 firmware • marvell 88ss1098 firmware

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References