CVE-2022-45163

An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol (SDP) mode: i.MX RT 1010, i.MX RT 1015, i.MX RT 1020, i.MX RT 1050, i.MX RT 1060, i.MX 6 Family, i.MX 7Dual/Solo, i.MX 7ULP, i.MX 8M Quad, i.MX 8M Mini, and Vybrid. In a device security-enabled configuration, memory contents could potentially leak to physically proximate attackers via the respective SDP port in cold and warm boot attacks. (The recommended mitigation is to completely disable the SDP mode by programming a one-time programmable eFUSE. Customers can contact NXP for additional information.)

• CWE-203
• CWE-203

• https://nxp.comProduct
• https://research.nccgroup.com/2022/11/17/cve-2022-45163/Exploit, Technical Description, Third Party Advisory
• https://research.nccgroup.com/category/technical-advisory/Exploit, Technical Description, Third Party Advisory
• https://nxp.comProduct
• https://research.nccgroup.com/2022/11/17/cve-2022-45163/Exploit, Technical Description, Third Party Advisory
• https://research.nccgroup.com/category/technical-advisory/Exploit, Technical Description, Third Party Advisory

Published

Nov 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-45152A blind Server-Side Request Forgery (SSRF) vulnerability was…9.1
• CVE-2022-45153An Incorrect Default Permissions vulnerability in saphanaboo…7.8
• CVE-2022-45154A Cleartext Storage of Sensitive Information vulnerability i…5.5
• CVE-2022-45155An Improper Handling of Exceptional Conditions vulnerability…5.5
• CVE-2022-45157A vulnerability has been identified in the way that Rancher …9.1
• CVE-2022-4516Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-45164An issue was discovered in Archibus Web Central 2022.03.01.1…4.3
• CVE-2022-45165An issue was discovered in Archibus Web Central 2022.03.01.1…8.8
• CVE-2022-45166An issue was discovered in Archibus Web Central 2022.03.01.1…4.3
• CVE-2022-45167An issue was discovered in Archibus Web Central 2022.03.01.1…4.3
• CVE-2022-45168An issue was discovered in LIVEBOX Collaboration vDesk throu…6.5
• CVE-2022-45169An issue was discovered in LIVEBOX Collaboration vDesk throu…5.4