MPU circumvention via SYSCFG registers

[tsusanka]

Impact: -
Scalability: Supply Chain
Severity: -
Fixed in: Firmware 1.6.3
Reported by: Sunny
Date reported: 2018-08-07

Details

Security fix deployed via the 1.6.1 firmware update could be circumvented via clever use of the SYSCFG registers. This was fixed by completely disabling the SYSCFG registers via the MPU.

Fix

trezor/trezor-firmware@fdd5cbe

Read more

Official blogpost