I have a Cypress EZ-USB FX2 USB mass storage device. AFAIK firmware is only allowed to be downloaded to either the external EEPROM or internal RAM when the device either1) Does not have an EEPROM, or 2) Has an empty EEPROM without any existing firmware
When this happens, the host PC will load the Cypress generic driver(Cypress FX2 - No EEPROM(0x8613) rather than the default USB Mass Storage driver.
However, I have heard a claim that it is possible to load firmware into the RAM using some Cypress SDK, overwriting the existing firmware, while the device is running in USB MSC mode. This is obviously a security risk since it allows hackers to overwrite the firmware and do possibly malicious things with the device. Is this possible?