Vulnerability Details : CVE-2019-10637
Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, & 88SS1098) devices are vulnerable in manipulating a combination of IO pins to bypass the secure boot protection mechanism.
Exploit prediction scoring system (EPSS) score for CVE-2019-10637
Probability of exploitation activity in the next 30 days: 0.06%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 23 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2019-10637
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
2.1
|
LOW | AV:L/AC:L/Au:N/C:N/I:P/A:N |
3.9
|
2.9
|
NIST |
4.6
|
MEDIUM | CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
0.9
|
3.6
|
NIST |
References for CVE-2019-10637
Products affected by CVE-2019-10637
- cpe:2.3:o:marvell:88ss1074_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss1079_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss1080_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss1093_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss1092_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss1095_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss9174_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss9175_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss9187_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss9188_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss9189_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss9190_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss1085_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss1087_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss1090_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss1100_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss1084_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss1088_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:marvell:88ss1098_firmware:-:*:*:*:*:*:*:*