Description
An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol (SDP) mode: i.MX RT 1010, i.MX RT 1015, i.MX RT 1020, i.MX RT 1050, i.MX RT 1060, i.MX 6 Family, i.MX 7Dual/Solo, i.MX 7ULP, i.MX 8M Quad, i.MX 8M Mini, and Vybrid. In a device security-enabled configuration, memory contents could potentially leak to physically proximate attackers via the respective SDP port in cold and warm boot attacks. (The recommended mitigation is to completely disable the SDP mode by programming a one-time programmable eFUSE. Customers can contact NXP for additional information.)
Published: 2022-11-18
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-48071 An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol (SDP) mode: i.MX RT 1010, i.MX RT 1015, i.MX RT 1020, i.MX RT 1050, i.MX RT 1060, i.MX 6 Family, i.MX 7Dual/Solo, i.MX 7ULP, i.MX 8M Quad, i.MX 8M Mini, and Vybrid. In a device security-enabled configuration, memory contents could potentially leak to physically proximate attackers via the respective SDP port in cold and warm boot attacks. (The recommended mitigation is to completely disable the SDP mode by programming a one-time programmable eFUSE. Customers can contact NXP for additional information.)
History

Wed, 30 Apr 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Subscriptions

Nxp I.mx 6 I.mx 6 Firmware I.mx 6dual I.mx 6dual Firmware I.mx 6duallite I.mx 6duallite Firmware I.mx 6dualplus I.mx 6dualplus Firmware I.mx 6quad I.mx 6quad Firmware I.mx 6quadplus I.mx 6quadplus Firmware I.mx 6solo I.mx 6solo Firmware I.mx 6sololite I.mx 6sololite Firmware I.mx 6solox I.mx 6solox Firmware I.mx 6ull I.mx 6ull Firmware I.mx 6ultralite I.mx 6ultralite Firmware I.mx 6ulz I.mx 6ulz Firmware I.mx 7dual I.mx 7dual Firmware I.mx 7solo I.mx 7solo Firmware I.mx 7ulp I.mx 7ulp Firmware I.mx 8m Mini I.mx 8m Mini Firmware I.mx 8m Quad I.mx 8m Quad Firmware I.mx 8m Vybrid I.mx 8m Vybrid Firmware I.mx Rt1010 I.mx Rt1010 Firmware I.mx Rt1015 I.mx Rt1015 Firmware I.mx Rt1020 I.mx Rt1020 Firmware I.mx Rt1050 I.mx Rt1050 Firmware I.mx Rt1060 I.mx Rt1060 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-04-30T14:38:50.059Z

Reserved: 2022-11-11T00:00:00.000Z

Link: CVE-2022-45163

cve-icon Vulnrichment

Updated: 2024-08-03T14:09:56.466Z

cve-icon NVD

Status : Modified

Published: 2022-11-18T23:15:29.807

Modified: 2025-04-30T15:15:59.090

Link: CVE-2022-45163

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses