Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095…
Priority LOW 21Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1087, 88SS1090, 88SS1100, 88SS1084, 88SS1088, & 88SS1098) devices are vulnerable in manipulating a combination of IO pins to bypass the secure boot protection mechanism.
Why it matters now
EPSS 0.00308 23rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 38
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:marvell:88ss1074_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss1074:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss1079_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss1079:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss1080_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss1080:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss1093_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss1093:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss1092_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss1092:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
- cpe:2.3:o:marvell:88ss1074_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss1074:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss1079_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss1079:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss1080_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss1080:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss1093_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss1093:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss1092_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss1092:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
Show 28 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:marvell:88ss1095_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss1095:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss9174_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss9174:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss9175_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss9175:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss9187_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss9187:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss9188_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss9188:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss9189_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss9189:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss9190_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss9190:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss1085_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss1085:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss1087_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss1087:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss1090_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss1090:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss1100_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss1100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss1084_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss1084:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss1088_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss1088:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
| cpe:2.3:o:marvell:88ss1098_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Marvell |
| cpe:2.3:h:marvell:88ss1098:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Marvell |
- cpe:2.3:o:marvell:88ss1095_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss1095:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss9174_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss9174:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss9175_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss9175:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss9187_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss9187:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss9188_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss9188:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss9189_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss9189:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss9190_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss9190:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss1085_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss1085:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss1087_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss1087:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss1090_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss1090:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss1100_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss1100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss1084_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss1084:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss1088_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss1088:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
- cpe:2.3:o:marvell:88ss1098_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Marvell
- cpe:2.3:h:marvell:88ss1098:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Marvell
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-10637
- 2026-10-03 Alias added: GHSA-qjw4-fv8h-3vrh
References
More Marvell 88ss1074 Firmware vulnerabilities
- TI-2019-07932 Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095… CVSS 3.0MEDIUM 4.6
Sources
- CVE-2019-10637 · CVE Program
- CVE-2019-10637 · NVD
- FIRST EPSS
- GHSA-qjw4-fv8h-3vrh · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences