Flash Memory Reprogramming Vulnerability in Marvell SSD Controller Products
CVE-2019-10636

4.6MEDIUM

Key Information:

Vendor

Marvell

Status
88ss1074 Firmware
Vendor
CVE Published:
4 June 2019

What is CVE-2019-10636?

Certain Marvell SSD Controller devices have a vulnerability that allows attackers to reprogram flash memory, thereby circumventing the secure boot protection. This could potentially enable unauthorized modifications to the system, posing significant risks to data integrity and device security. Users of affected devices should take immediate action to mitigate the risks associated with this vulnerability.

References

https://www.marvell.com/documents/x9g4hrszt5ls3udbe1eo/
x_refsource_CONFIRM

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.