Details of VAR-201906-1092

ID

VAR-201906-1092

CVE

CVE-2019-10637

TITLE

plural Marvell SSD Controller Vulnerabilities related to security functions in devices

Trust: 0.8

sources: JVNDB: JVNDB-2019-005174

DESCRIPTION

plural Marvell SSD Controller The device contains vulnerabilities related to security functions.Information may be tampered with. Marvell SSD Controller 88SS1074 is a solid-state hard drive controller from Marvell. This vulnerability is due to the lack of security measures such as authentication, access control, and rights management in network systems or products. The following products and versions are affected: Marvell SSD Controller 88SS1074 ; 88SS1079 ; 88SS1080 ; 88SS1093 ; 88SS1092 ; 88SS1095 ; 88SS9174 ; 88SS9175 ; 88SS9187 ; 88SS9188 ; 88SS9189 ; 88SS9190 ; 88SS1085 ; 88SS1087 ; 88SS1090 ; 88SS1100 ; 88SS1084 ; 88SS1088 ; 88SS1098

Trust: 0.81

sources: JVNDB: JVNDB-2019-005174 // VULHUB: VHN-142203

AFFECTED PRODUCTS

vendor:	marvell	model:	88ss1080	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss1087	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss1085	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss1100	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss1092	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss9188	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss9174	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss9175	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss1074	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss9189	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss1098	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss1095	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss1088	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss1093	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss1090	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss1079	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss1084	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss9187	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss9190	scope:	eq	version:	-	Trust: 1.0
vendor:	marvell	model:	88ss1074	scope:	-	version:	-	Trust: 0.8
vendor:	marvell	model:	88ss1079	scope:	-	version:	-	Trust: 0.8
vendor:	marvell	model:	88ss1080	scope:	-	version:	-	Trust: 0.8
vendor:	marvell	model:	88ss1092	scope:	-	version:	-	Trust: 0.8
vendor:	marvell	model:	88ss1093	scope:	-	version:	-	Trust: 0.8
vendor:	marvell	model:	88ss1095	scope:	-	version:	-	Trust: 0.8
vendor:	marvell	model:	88ss9174	scope:	-	version:	-	Trust: 0.8
vendor:	marvell	model:	88ss9175	scope:	-	version:	-	Trust: 0.8
vendor:	marvell	model:	88ss9187	scope:	-	version:	-	Trust: 0.8
vendor:	marvell	model:	88ss9188	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2019-005174 // NVD: CVE-2019-10637

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-10637
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2019-10637
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201906-216
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-142203
value:	LOW
Trust: 0.1

nvd@nist.gov:	CVE-2019-10637
severity:	LOW
baseScore:	2.1
vectorString:	AV:L/AC:L/AU:N/C:N/I:P/A:N
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-142203
severity:	LOW
baseScore:	2.1
vectorString:	AV:L/AC:L/AU:N/C:N/I:P/A:N
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2019-10637
baseSeverity:	MEDIUM
baseScore:	4.6
vectorString:	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
attackVector:	PHYSICAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	0.9
impactScore:	3.6
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-142203 // JVNDB: JVNDB-2019-005174 // CNNVD: CNNVD-201906-216 // NVD: CVE-2019-10637

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	CWE-254	Trust: 0.9

sources: VULHUB: VHN-142203 // JVNDB: JVNDB-2019-005174 // NVD: CVE-2019-10637

TYPE

security feature problem

Trust: 0.6

sources: CNNVD: CNNVD-201906-216

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-005174

PATCH

title:

Security Advisory

url:

https://www.marvell.com/documents/x9g4hrszt5ls3udbe1eo/

Trust: 0.8

sources: JVNDB: JVNDB-2019-005174

EXTERNAL IDS

db:	NVD	id:	CVE-2019-10637	Trust: 2.5
db:	JVNDB	id:	JVNDB-2019-005174	Trust: 0.8
db:	CNNVD	id:	CNNVD-201906-216	Trust: 0.7
db:	VULHUB	id:	VHN-142203	Trust: 0.1

sources: VULHUB: VHN-142203 // JVNDB: JVNDB-2019-005174 // CNNVD: CNNVD-201906-216 // NVD: CVE-2019-10637

REFERENCES

url:	https://www.marvell.com/documents/x9g4hrszt5ls3udbe1eo/	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2019-10637	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-10637	Trust: 0.8

sources: VULHUB: VHN-142203 // JVNDB: JVNDB-2019-005174 // CNNVD: CNNVD-201906-216 // NVD: CVE-2019-10637

SOURCES

db:	VULHUB	id:	VHN-142203
db:	JVNDB	id:	JVNDB-2019-005174
db:	CNNVD	id:	CNNVD-201906-216
db:	NVD	id:	CVE-2019-10637

LAST UPDATE DATE

2024-11-23T23:11:47.616000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-142203	date:	2020-08-24T00:00:00
db:	JVNDB	id:	JVNDB-2019-005174	date:	2019-06-17T00:00:00
db:	CNNVD	id:	CNNVD-201906-216	date:	2020-08-25T00:00:00
db:	NVD	id:	CVE-2019-10637	date:	2024-11-21T04:19:38.470

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-142203	date:	2019-06-05T00:00:00
db:	JVNDB	id:	JVNDB-2019-005174	date:	2019-06-17T00:00:00
db:	CNNVD	id:	CNNVD-201906-216	date:	2019-06-05T00:00:00
db:	NVD	id:	CVE-2019-10637	date:	2019-06-05T16:29:00.243