CVE-2022-45163

Katalog CVE

CVSS 4.6 · Medium EPSS 0,59%

Kerentanan Observable Discrepancy pada nxp i.mx 6 firmware, nxp i.mx 6dual firmware +21 lainnya. Skor CVSS 3.1 4.6 (Medium) menurut NVD.

Deskripsi (NVD)

An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol (SDP) mode: i.MX RT 1010, i.MX RT 1015, i.MX RT 1020, i.MX RT 1050, i.MX RT 1060, i.MX 6 Family, i.MX 7Dual/Solo, i.MX 7ULP, i.MX 8M Quad, i.MX 8M Mini, and Vybrid. In a device security-enabled configuration, memory contents could potentially leak to physically proximate attackers via the respective SDP port in cold and warm boot attacks. (The recommended mitigation is to completely disable the SDP mode by programming a one-time programmable eFUSE. Customers can contact NXP for additional information.)

Rincian

Terbit di NVD

18 November 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.6 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-203: Observable Discrepancy

EPSS (30 hari)

0,59% peluang dieksploitasi; lebih tinggi dari 46,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://research.nccgroup.com/2022/11/17/cve-2022-45163/ exploit · deskripsi teknis · advisory pihak ketiga
• https://research.nccgroup.com/category/technical-advisory/ exploit · deskripsi teknis · advisory pihak ketiga
• https://nxp.com product