Reading CCM RAM on STM32F407 with Readout Protection Level 1
Readout protection Level 1 (RDP1) on STM32F4 stops a debugger from reading the flash memory. It does not stop the debugger from reading RAM, and that includes the 64 KiB core coupled memory (CCM), which the reference manual describes as “accessible only by the CPU”. This article shows why, how to dump both CCM and SRAM of an RDP1-protected STM32F407 without resetting the target, and what that means for firmware that relies on RDP1 alone.

