Defeating Proprietary Code Read Out Protection (PCROP) on STMicroelectronics STM32F7 devices via the Instruction Tightly Coupled Memory (ITCM) bus using a debug probe

Defeating Proprietary Code Read Out Protection (PCROP) on STMicroelectronics STM32F7 devices via the Instruction Tightly Coupled Memory (ITCM) bus using a debug probe

CVE-2019-14238 · MEDIUM Severity

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection (PCROP) (a software IP protection method) can be defeated with a debug probe via the Instruction Tightly Coupled Memory (ITCM) bus.

Learn more about our Web Application Penetration Testing UK.