CVE-2022-45163
First published: Fri Nov 18 2022(Updated: )
An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol (SDP) mode: i.MX RT 1010, i.MX RT 1015, i.MX RT 1020, i.MX RT 1050, i.MX RT 1060, i.MX 6 Family, i.MX 7Dual/Solo, i.MX 7ULP, i.MX 8M Quad, i.MX 8M Mini, and Vybrid. In a device security-enabled configuration, memory contents could potentially leak to physically proximate attackers via the respective SDP port in cold and warm boot attacks. (The recommended mitigation is to completely disable the SDP mode by programming a one-time programmable eFUSE. Customers can contact NXP for additional information.)
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nxp I.mx 6 Firmware | ||
| Nxp I.mx 6 | ||
| Nxp I.mx 6dual Firmware | ||
| Nxp I.mx 6dual | ||
| Nxp I.mx 6duallite Firmware | ||
| Nxp I.mx 6duallite | ||
| Nxp I.mx 6dualplus Firmware | ||
| Nxp I.mx 6dualplus | ||
| Nxp I.mx 6quad Firmware | ||
| Nxp I.mx 6quad | ||
| Nxp I.mx 6quadplus Firmware | ||
| Nxp I.mx 6quadplus | ||
| Nxp I.mx 6solo Firmware | ||
| Nxp I.mx 6solo | ||
| Nxp I.mx 6sololite Firmware | ||
| Nxp I.mx 6sololite | ||
| Nxp I.mx 6solox Firmware | ||
| Nxp I.mx 6solox | ||
| Nxp I.mx 6ull Firmware | ||
| Nxp I.mx 6ull | ||
| Nxp I.mx 6ultralite Firmware | ||
| Nxp I.mx 6ultralite | ||
| Nxp I.mx 6ulz Firmware | ||
| Nxp I.mx 6ulz | ||
| Nxp I.mx 7dual Firmware | ||
| Nxp I.mx 7dual | ||
| Nxp I.mx 7solo Firmware | ||
| Nxp I.mx 7solo | ||
| Nxp I.mx 7ulp Firmware | ||
| Nxp I.mx 7ulp | ||
| Nxp I.mx 8m Mini Firmware | ||
| Nxp I.mx 8m Mini | ||
| Nxp I.mx 8m Quad Firmware | ||
| Nxp I.mx 8m Quad | ||
| Nxp I.mx 8m Vybrid Firmware | ||
| Nxp I.mx 8m Vybrid | ||
| Nxp I.mx Rt1010 Firmware | ||
| Nxp I.mx Rt1010 | ||
| Nxp I.mx Rt1015 Firmware | ||
| Nxp I.mx Rt1015 | ||
| Nxp I.mx Rt1020 Firmware | ||
| Nxp I.mx Rt1020 | ||
| Nxp I.mx Rt1050 Firmware | ||
| Nxp I.mx Rt1050 | ||
| Nxp I.mx Rt1060 Firmware | ||
| Nxp I.mx Rt1060 | ||
| All of | ||
| Nxp I.mx 6 Firmware | ||
| Nxp I.mx 6 | ||
| All of | ||
| Nxp I.mx 6dual Firmware | ||
| Nxp I.mx 6dual | ||
| All of | ||
| Nxp I.mx 6duallite Firmware | ||
| Nxp I.mx 6duallite | ||
| All of | ||
| Nxp I.mx 6dualplus Firmware | ||
| Nxp I.mx 6dualplus | ||
| All of | ||
| Nxp I.mx 6quad Firmware | ||
| Nxp I.mx 6quad | ||
| All of | ||
| Nxp I.mx 6quadplus Firmware | ||
| Nxp I.mx 6quadplus | ||
| All of | ||
| Nxp I.mx 6solo Firmware | ||
| Nxp I.mx 6solo | ||
| All of | ||
| Nxp I.mx 6sololite Firmware | ||
| Nxp I.mx 6sololite | ||
| All of | ||
| Nxp I.mx 6solox Firmware | ||
| Nxp I.mx 6solox | ||
| All of | ||
| Nxp I.mx 6ull Firmware | ||
| Nxp I.mx 6ull | ||
| All of | ||
| Nxp I.mx 6ultralite Firmware | ||
| Nxp I.mx 6ultralite | ||
| All of | ||
| Nxp I.mx 6ulz Firmware | ||
| Nxp I.mx 6ulz | ||
| All of | ||
| Nxp I.mx 7dual Firmware | ||
| Nxp I.mx 7dual | ||
| All of | ||
| Nxp I.mx 7solo Firmware | ||
| Nxp I.mx 7solo | ||
| All of | ||
| Nxp I.mx 7ulp Firmware | ||
| Nxp I.mx 7ulp | ||
| All of | ||
| Nxp I.mx 8m Mini Firmware | ||
| Nxp I.mx 8m Mini | ||
| All of | ||
| Nxp I.mx 8m Quad Firmware | ||
| Nxp I.mx 8m Quad | ||
| All of | ||
| Nxp I.mx 8m Vybrid Firmware | ||
| Nxp I.mx 8m Vybrid | ||
| All of | ||
| Nxp I.mx Rt1010 Firmware | ||
| Nxp I.mx Rt1010 | ||
| All of | ||
| Nxp I.mx Rt1015 Firmware | ||
| Nxp I.mx Rt1015 | ||
| All of | ||
| Nxp I.mx Rt1020 Firmware | ||
| Nxp I.mx Rt1020 | ||
| All of | ||
| Nxp I.mx Rt1050 Firmware | ||
| Nxp I.mx Rt1050 | ||
| All of | ||
| Nxp I.mx Rt1060 Firmware | ||
| Nxp I.mx Rt1060 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-45163?
CVE-2022-45163 is an information-disclosure vulnerability that exists on select NXP devices when configured in Serial Download Protocol (SDP) mode.
Which NXP devices are affected by CVE-2022-45163?
The following NXP devices are affected by CVE-2022-45163: i.MX RT 1010, i.MX RT 1015, i.MX RT 1020, i.MX RT 1050, i.MX RT 1060, i.MX 6 Family, i.MX 7Dual/Solo, i.MX 7ULP, i.MX 8M Quad, i.MX 8M Mini, and Vybrid.
What is the severity of CVE-2022-45163?
The severity of CVE-2022-45163 is medium, with a severity value of 4.6.
How can I fix CVE-2022-45163?
To fix CVE-2022-45163, apply the necessary patches or updates provided by NXP for your specific device.
Where can I find more information about CVE-2022-45163?
You can find more information about CVE-2022-45163 on the NXP website and the NCC Group technical advisory.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/references
- agent/first-publish-date
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/nxp
- canonical/nxp i.mx 6 firmware
- canonical/nxp i.mx 6
- canonical/nxp i.mx 6dual firmware
- canonical/nxp i.mx 6dual
- canonical/nxp i.mx 6duallite firmware
- canonical/nxp i.mx 6duallite
- canonical/nxp i.mx 6dualplus firmware
- canonical/nxp i.mx 6dualplus
- canonical/nxp i.mx 6quad firmware
- canonical/nxp i.mx 6quad
- canonical/nxp i.mx 6quadplus firmware
- canonical/nxp i.mx 6quadplus
- canonical/nxp i.mx 6solo firmware
- canonical/nxp i.mx 6solo
- canonical/nxp i.mx 6sololite firmware
- canonical/nxp i.mx 6sololite
- canonical/nxp i.mx 6solox firmware
- canonical/nxp i.mx 6solox
- canonical/nxp i.mx 6ull firmware
- canonical/nxp i.mx 6ull
- canonical/nxp i.mx 6ultralite firmware
- canonical/nxp i.mx 6ultralite
- canonical/nxp i.mx 6ulz firmware
- canonical/nxp i.mx 6ulz
- canonical/nxp i.mx 7dual firmware
- canonical/nxp i.mx 7dual
- canonical/nxp i.mx 7solo firmware
- canonical/nxp i.mx 7solo
- canonical/nxp i.mx 7ulp firmware
- canonical/nxp i.mx 7ulp
- canonical/nxp i.mx 8m mini firmware
- canonical/nxp i.mx 8m mini
- canonical/nxp i.mx 8m quad firmware
- canonical/nxp i.mx 8m quad
- canonical/nxp i.mx 8m vybrid firmware
- canonical/nxp i.mx 8m vybrid
- canonical/nxp i.mx rt1010 firmware
- canonical/nxp i.mx rt1010
- canonical/nxp i.mx rt1015 firmware
- canonical/nxp i.mx rt1015
- canonical/nxp i.mx rt1020 firmware
- canonical/nxp i.mx rt1020
- canonical/nxp i.mx rt1050 firmware
- canonical/nxp i.mx rt1050
- canonical/nxp i.mx rt1060 firmware
- canonical/nxp i.mx rt1060