What’s Vulnerable › Vulnerabilities
CVE-2022-45163
- Severity: medium (CVSS 4.6 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-11-18 · updated 2026-06-17
- Weakness: CWE-203
Description
An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol (SDP) mode: i.MX RT 1010, i.MX RT 1015, i.MX RT 1020, i.MX RT 1050, i.MX RT 1060, i.MX 6 Family, i.MX 7Dual/Solo, i.MX 7ULP, i.MX 8M Quad, i.MX 8M Mini, and Vybrid. In a device security-enabled configuration, memory contents could potentially leak to physically proximate attackers via the respective SDP port in cold and warm boot attacks. (The recommended mitigation is to completely disable the SDP mode by programming a one-time programmable eFUSE. Customers can contact NXP for additional information.)
Affected products
- NXP I.Mx 6 Firmware: all versions
- NXP I.Mx 6Dual Firmware: all versions
- NXP I.Mx 6Duallite Firmware: all versions
- NXP I.Mx 6Dualplus Firmware: all versions
- NXP I.Mx 6Quad Firmware: all versions
- NXP I.Mx 6Quadplus Firmware: all versions
- NXP I.Mx 6Solo Firmware: all versions
- NXP I.Mx 6Sololite Firmware: all versions
- NXP I.Mx 6Solox Firmware: all versions
- NXP I.Mx 6Ull Firmware: all versions
- NXP I.Mx 6Ultralite Firmware: all versions
- NXP I.Mx 6Ulz Firmware: all versions
- NXP I.Mx 7Dual Firmware: all versions
- NXP I.Mx 7Solo Firmware: all versions
- NXP I.Mx 7Ulp Firmware: all versions
- NXP I.Mx 8M Mini Firmware: all versions
- NXP I.Mx 8M Quad Firmware: all versions
- NXP I.Mx 8M Vybrid Firmware: all versions
- NXP I.Mx Rt1010 Firmware: all versions
- NXP I.Mx Rt1015 Firmware: all versions
- NXP I.Mx Rt1020 Firmware: all versions
- NXP I.Mx Rt1050 Firmware: all versions
- NXP I.Mx Rt1060 Firmware: all versions
References
- https://nxp.com
- https://research.nccgroup.com/2022/11/17/cve-2022-45163/
- https://research.nccgroup.com/category/technical-advisory/
- https://nxp.com
- https://research.nccgroup.com/2022/11/17/cve-2022-45163/
- https://research.nccgroup.com/category/technical-advisory/
Get alerted when CVE-2022-45163 or the next vulnerability affects your stack