Marvell

32 CVEs across 59 Marvell products. Browse Marvell vulnerabilities, severities, and proof-of-concept exploits.

Marvell products with known CVEs

ProductCVEs
Qconvergeconsole27
88ss10742
88ss1074 Firmware2
88ss10792
88ss1079 Firmware2
88ss10802
88ss1080 Firmware2
88ss10842
88ss1084 Firmware2
88ss10852
88ss1085 Firmware2
88ss10872
88ss1087 Firmware2
88ss10882
88ss1088 Firmware2
88ss10902
88ss1090 Firmware2
88ss10922
88ss1092 Firmware2
88ss10932
88ss1093 Firmware2
88ss10952
88ss1095 Firmware2
88ss10982
88ss1098 Firmware2
88ss11002
88ss1100 Firmware2
88ss91742
88ss9174 Firmware2
88ss91752
88ss9175 Firmware2
88ss91872
88ss9187 Firmware2
88ss91882
88ss9188 Firmware2
88ss91892
88ss9189 Firmware2
88ss91902
88ss9190 Firmware2
88w8361p-Bem12
88w8361w-Bem12
88w86882
88w8688 Firmware2
Qconvergeconslole Gui2
88w8361p-Bem Chipset1
88w87871
88w8787 Firmware1
88w87971
88w8797 Firmware1
88w88011
Marvell CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-8426Critical9.42025-07-31Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability. This vulnerability allows remote a…
CVE-2025-6807High7.52025-07-07Marvell QConvergeConsole getDriverTmpPath Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sens…
CVE-2025-6806High7.52025-07-07Marvell QConvergeConsole decryptFile Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary fil…
CVE-2025-6805Critical9.12025-07-07Marvell QConvergeConsole deleteEventLogFile Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arb…
CVE-2025-6804High7.52025-07-07Marvell QConvergeConsole compressFirmwareDumpFiles Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disc…
CVE-2025-6803High7.52025-07-07Marvell QConvergeConsole compressDriverFiles Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose s…
CVE-2025-6802Critical9.82025-07-07Marvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…
CVE-2025-6801High7.52025-07-07Marvell QConvergeConsole saveNICParamsToFile Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbit…
CVE-2025-6800High7.52025-07-07Marvell QConvergeConsole restoreESwitchConfig Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose…
CVE-2025-6799High7.52025-07-07Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose se…
CVE-2025-6798Critical9.12025-07-07Marvell QConvergeConsole deleteAppFile Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrar…
CVE-2025-6797High7.52025-07-07Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose se…
CVE-2025-6796High7.52025-07-07Marvell QConvergeConsole getAppFileBytes Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensi…
CVE-2025-6795High7.52025-07-07Marvell QConvergeConsole getFileUploadSize Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sen…
CVE-2025-6794Critical9.82025-07-07Marvell QConvergeConsole saveAsText Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co…
CVE-2025-6793Critical9.42025-07-07Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability. This vulnerability allows rem…
CVE-2020-5805High8.82021-01-08In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users.xml. OS-level users on the QCC host who are not authorized to…
CVE-2020-5804High8.12021-01-08Marvell QConvergeConsole GUI <= 5.5.0.74 is affected by a path traversal vulnerability. The deleteEventLogFile method of the GWTTestServiceImpl class lacks pro…
CVE-2020-5803High8.12020-12-18Relative Path Traversal in Marvell QConvergeConsole GUI 5.5.0.74 allows a remote, authenticated attacker to delete arbitrary files on disk as SYSTEM or root.
CVE-2020-17389High8.82020-08-25This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is…
CVE-2020-17388High8.82020-08-25This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is…
CVE-2020-17387High8.82020-08-25This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is…
CVE-2020-15645High8.82020-08-25This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is…
CVE-2020-15644High8.82020-08-25This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is…
CVE-2020-15643High8.82020-08-25This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is…
CVE-2020-15642High8.82020-08-25This vulnerability allows remote attackers to execute arbitrary code on affected installations of installations of Marvell QConvergeConsole 5.5.0.64. Although…
CVE-2020-15641High7.52020-08-25This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole 5.5.0.64. Authentication is…
CVE-2020-15640High7.52020-08-25This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole 5.5.0.64. Authentication is…
CVE-2020-15639Critical9.82020-08-25This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Authentication is not requ…
CVE-2019-13582Critical9.82019-11-15An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parro…
CVE-2019-13581Critical9.82019-11-15An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parro…
CVE-2019-10637Medium4.62019-06-05Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1…
CVE-2019-10636Medium4.62019-06-04Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS9190, 88SS1085, 88SS1…
CVE-2019-6496High8.82019-01-20The ThreadX-based firmware on Marvell Avastar Wi-Fi devices, models 88W8787, 88W8797, 88W8801, 88W8897, and 88W8997, allows remote attackers to execute arbitra…
CVE-2015-5738High7.52016-07-26The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forwar…
CVE-2007-54752009-11-12Multiple buffer overflows in the Marvell wireless driver, as used in Linksys WAP4400N Wi-Fi access point with firmware 1.2.17 on the Marvell 88W8361P-BEM1 chip…
CVE-2008-45942008-10-17Unspecified vulnerability in the SNMPv3 component in Linksys WAP4400N firmware 1.2.14 on the Marvell Semiconductor 88W8361P-BEM1 chipset has unknown impact and…
CVE-2008-44412008-10-14The Marvell driver for the Linksys WAP4400N Wi-Fi access point with firmware 1.2.14 on the Marvell 88W8361P-BEM1 chipset, when WEP mode is enabled, does not pr…
CVE-2008-11972008-09-05The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID informa…
CVE-2008-11442008-09-05The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse EAPoL-Key packet…