re:trace — Xbox One Model 1540 — Durango (AMD Liverpool APU, 28nm)

Executive Summary

Analysis of Xbox One Model 1540 — Durango (AMD Liverpool APU, 28nm) identified 150 components (35 with part number matches) and 68 traces. Security scan detected 1 HIGH severity finding (max CVSS 7.6). 1 exposed debug interface requiring physical access controls. Mapped to MITRE ATT&CK techniques: T0839, T1200.

Methodology

This assessment was performed using automated PCB reverse engineering techniques:

Component Detection — YOLO v8 object detection with OpenCV contour fallback for air-gapped environments.
OCR & Identification — EasyOCR marking extraction with fuzzy matching against a 128-part component database.
Trace Extraction — Dual-space (HSV+LAB) color segmentation with Zhang-Suen skeletonization for copper trace mapping.
Constraint Inference — AC-3 arc consistency propagation to infer connections not directly visible.
Security Analysis — Pattern-matched debug interface detection with CVSS 3.1 scoring and MITRE ATT&CK mapping.

Findings are classified per CVSS v3.1 (physical access vector). CWE references follow MITRE CWE v4.x. ATT&CK technique IDs reference both Enterprise (T1200) and ICS (T0839, T0845) matrices.

Security Findings

Severity	CVSS	Interface	Component	CWE	ATT&CK	Description
HIGH	7.6	JTAG	J5	CWE-1191	T1200, T0839	JTAG debug — full CPU access

Pinout Diagrams

Annotated header close-ups with pin assignments and probe wiring guides. Click to expand.

JTAG — JTAG

Component Intelligence

Security-relevant specifications extracted from component datasheets. Debug interfaces, boot mode pins, readout protection, and flash dump commands.

TPS54331DR power

Output Voltage	0.8V–25V adjustable
Enable Pin	EN (pin 3)
Input Range	3.5V–28V
Current Max	3A
Topology	Synchronous Buck

IC Pinout Diagram

Component Inventory

Ref	Type	Part Number	Marking	Value	Package	Datasheet	Confidence
C1	Capacitor	—	100nF	100nF	0402	—	98%
C10	Capacitor	—	100nF	100nF	0402	—	98%
C11	Capacitor	—	100nF	100nF	0402	—	88%
C12	Capacitor	—	10uF	10uF	0805	—	93%
C13	Capacitor	—	100nF	100nF	0402	—	98%
C14	Capacitor	—	100nF	100nF	0402	—	88%
C15	Capacitor	—	100nF	100nF	0402	—	93%
C16	Capacitor	—	10uF	10uF	0805	—	98%
C17	Capacitor	—	100nF	100nF	0402	—	88%
C18	Capacitor	—	10uF	10uF	0805	—	93%
C19	Capacitor	—	100nF	100nF	0402	—	98%
C2	Capacitor	—	100nF	100nF	0402	—	88%
C20	Capacitor	—	10uF	10uF	0805	—	88%
C21	Capacitor	—	100nF	100nF	0402	—	93%
C22	Capacitor	—	10uF	10uF	0805	—	98%
C23	Capacitor	—	100nF	100nF	0402	—	88%
C24	Capacitor	—	10uF	10uF	0805	—	93%
C25	Capacitor	—	100nF	100nF	0402	—	98%
C26	Capacitor	—	10uF	10uF	0805	—	88%
C27	Capacitor	—	100nF	100nF	0402	—	93%
C28	Capacitor	—	10uF	10uF	0805	—	98%
C29	Capacitor	—	100nF	100nF	0402	—	88%
C3	Capacitor	—	10uF	10uF	0805	—	93%
C30	Capacitor	—	10uF	10uF	0805	—	93%
C31	Capacitor	—	100nF	100nF	0402	—	98%
C32	Capacitor	—	10uF	10uF	0805	—	88%
C33	Capacitor	—	100nF	100nF	0402	—	93%
C34	Capacitor	—	10uF	10uF	0805	—	98%
C35	Capacitor	—	100nF	100nF	0402	—	88%
C36	Capacitor	—	10uF	10uF	0805	—	93%
C37	Capacitor	—	100nF	100nF	0402	—	98%
C38	Capacitor	—	10uF	10uF	0805	—	88%
C39	Capacitor	—	470uF	470uF	1210	—	93%
C4	Capacitor	—	100nF	100nF	0402	—	98%
C40	Capacitor	—	470uF	470uF	1210	—	98%
C41	Capacitor	—	22uF	22uF	0805	—	88%
C42	Capacitor	—	22uF	22uF	0805	—	93%
C43	Capacitor	—	22uF	22uF	0805	—	98%
C44	Capacitor	—	22uF	22uF	0805	—	88%
C45	Capacitor	—	100nF	100nF	0402	—	93%
C46	Capacitor	—	10uF	10uF	0805	—	98%
C47	Capacitor	—	10uF	10uF	0805	—	88%
C48	Capacitor	—	22pF	22pF	0402	—	93%
C49	Capacitor	—	22pF	22pF	0402	—	98%
C5	Capacitor	—	22uF	22uF	0805	—	88%
C50	Capacitor	—	100uF	100uF	1206	—	88%
C51	Capacitor	—	10uF	10uF	0805	—	93%
C52	Capacitor	—	10uF	10uF	0805	—	98%
C53	Capacitor	—	100nF	100nF	0402	—	88%
C54	Capacitor	—	100nF	100nF	0402	—	93%
C55	Capacitor	—	1uF	1uF	0402	—	98%
C56	Capacitor	—	100nF	100nF	0402	—	88%
C6	Capacitor	—	100nF	100nF	0402	—	93%
C7	Capacitor	—	100nF	100nF	0402	—	98%
C8	Capacitor	—	100nF	100nF	0402	—	88%
C9	Capacitor	—	10uF	10uF	0805	—	93%
D1	Ic	USBLC6-2SC6	USBLC6		SOT-23-6	—	88%
D10	Resistor	—	KINECT	WHITE	0805	—	98%
D2	Ic	USBLC6-2SC6	USBLC6		SOT-23-6	—	93%
D3	Ic	IP4283CZ10	IP4283CZ		SOT-665	—	98%
D4	Ic	PRTR5V0U2X	PRTR5V0		SOT-143	—	88%
D5	Ic	IP4283CZ10	IP4283CZ		SOT-665	—	93%
D6	Ic	PRTR5V0U2X	PRTR5V0		SOT-143	—	98%
D7	Resistor	—	PWR	GREEN	0805	—	98%
D8	Resistor	—	DISK	AMBER	0805	—	88%
D9	Resistor	—	WIFI	BLUE	0805	—	93%
J1	Connector	—	HDMI		HDMI-A	—	88%
J10	Connector	—	DC 12V		Barrel-5.5mm	—	93%
J2	Connector	—	USB3.0		USB-A	—	93%
J3	Connector	—	USB3.0		USB-A	—	98%
J4	Connector	—	RJ45		RJ45	—	88%
J5	Connector	—	JTAG		2x7 1.27mm	—	93%
J6	Connector	—	SATA		SATA-7P	—	88%
J7	Connector	—	ANT		U.FL	—	93%
J8	Connector	—	IR		3-pin	—	98%
J9	Connector	—	TOSLINK		TOSLINK	—	88%
L1	Inductor	—	1uH	1uH	1210	—	98%
L2	Inductor	—	1uH	1uH	1210	—	88%
L3	Inductor	—	0.47uH	0.47uH	1210	—	93%
L4	Inductor	—	1uH	1uH	1210	—	98%
L5	Inductor	—	2.2uH	2.2uH	1210	—	88%
Q1	Ic	BSC014N04LS	BSC014N04		TDSON-8	—	88%
Q2	Ic	BSC014N04LS	BSC014N04		TDSON-8	—	93%
Q3	Ic	BSC014N04LS	BSC014N04		TDSON-8	—	98%
Q4	Ic	BSC014N04LS	BSC014N04		TDSON-8	—	88%
Q5	Ic	BSC014N04LS	BSC014N04		TDSON-8	—	93%
Q6	Ic	BSC014N04LS	BSC014N04		TDSON-8	—	98%
R1	Resistor	—	10k	10k	0402	—	98%
R10	Resistor	—	90	90	0402	—	93%
R11	Resistor	—	90	90	0402	—	98%
R12	Resistor	—	10k	10k	0402	—	88%
R13	Resistor	—	49.9	49.9	0402	—	93%
R14	Resistor	—	49.9	49.9	0402	—	98%
R15	Resistor	—	49.9	49.9	0402	—	88%
R16	Resistor	—	49.9	49.9	0402	—	93%
R17	Resistor	—	330	330	0402	—	98%
R18	Resistor	—	330	330	0402	—	88%
R19	Resistor	—	330	330	0402	—	93%
R2	Resistor	—	4k7	4k7	0402	—	88%
R20	Resistor	—	330	330	0402	—	98%
R21	Resistor	—	33	33	0402	—	93%
R22	Resistor	—	33	33	0402	—	98%
R23	Resistor	—	0	0	0402	—	88%
R24	Resistor	—	10k	10k	0402	—	93%
R25	Resistor	—	1k	1k	0402	—	98%
R3	Resistor	—	100	100	0402	—	93%
R4	Resistor	—	4k7	4k7	0402	—	93%
R5	Resistor	—	4k7	4k7	0402	—	98%
R6	Resistor	—	4k7	4k7	0402	—	88%
R7	Resistor	—	4k7	4k7	0402	—	93%
R8	Resistor	—	90	90	0402	—	98%
R9	Resistor	—	90	90	0402	—	88%
TP1	Test Point	—	TP1		TP	—	98%
TP10	Test Point	—	TP10		TP	—	93%
TP11	Test Point	—	TP11		TP	—	98%
TP12	Test Point	—	TP12		TP	—	88%
TP13	Test Point	—	TP13		TP	—	93%
TP14	Test Point	—	TP14		TP	—	98%
TP15	Test Point	—	TP15		TP	—	88%
TP2	Test Point	—	TP2		TP	—	88%
TP3	Test Point	—	TP3		TP	—	93%
TP4	Test Point	—	TP4		TP	—	98%
TP5	Test Point	—	TP5		TP	—	88%
TP6	Test Point	—	TP6		TP	—	88%
TP7	Test Point	—	TP7		TP	—	93%
TP8	Test Point	—	TP8		TP	—	98%
TP9	Test Point	—	TP9		TP	—	88%
U1	Ic	AMD Liverpool	Liverpool		BGA-1170	—	88%
U10	Ic	NCP4204	NCP4204		QFN-52	—	88%
U11	Ic	IR3553	IR3553		PQFN-25	—	93%
U12	Ic	TMDS442	TMDS442		QFP-48	—	98%
U13	Ic	H5TQ4G63AFR-PBC	H5TQ4G63AFR	4Gb	BGA-78	—	93%
U14	Ic	H5TQ4G63AFR-PBC	H5TQ4G63AFR	4Gb	BGA-78	—	98%
U15	Ic	H5TQ4G63AFR-PBC	H5TQ4G63AFR	4Gb	BGA-78	—	88%
U16	Ic	H5TQ4G63AFR-PBC	H5TQ4G63AFR	4Gb	BGA-78	—	93%
U17	Ic	NCP302155	NCP302155		PQFN-40	—	98%
U18	Ic	NCP302155	NCP302155		PQFN-40	—	88%
U19	Ic	NCP81111	NCP81111		QFN-36	—	93%
U2	Ic	H5TQ4G63AFR-PBC	H5TQ4G63AFR	4Gb	BGA-78	—	93%
U20	Ic	NCP81111	NCP81111		QFN-36	—	98%
U21	Ic	TPS54331DR	TPS54331		SOIC-8	—	88%
U22	Ic	TLV1117LV33	TLV1117-33	3.3V	SOT-223	—	93%
U3	Ic	H5TQ4G63AFR-PBC	H5TQ4G63AFR	4Gb	BGA-78	—	98%
U4	Ic	H5TQ4G63AFR-PBC	H5TQ4G63AFR	4Gb	BGA-78	—	88%
U5	Ic	H5TQ4G63AFR-PBC	H5TQ4G63AFR	4Gb	BGA-78	—	93%
U6	Ic	X861949-005	X861949		BGA-360	—	98%
U7	Ic	H26M42003GMR	H26M42003GMR	8GB	BGA-153	—	88%
U8	Ic	88W8897-NNB2	88W8897		QFN-68	—	93%
U9	Ic	RTL8151GNM	RTL8151GNM		QFN-40	—	98%
Y1	Crystal	ABLS-25.000MHZ	25MHz	25MHz	HC-49S	—	93%

Functional Zones

APU Complex

cpu · 1 component

Show components

U1

DDR3 Memory Bank A

memory · 16 components

Show components

U2, U3, U13, U14, C15, C16, C17, C18, C23, C24, C25, C26, R13, R14, R15, R16

DDR3 Memory Bank B

memory · 12 components

Show components

U4, U5, U15, U16, C19, C20, C21, C22, C27, C28, C29, C30

Power Delivery

power · 29 components

Show components

U10, U11, U17, U18, U19, U20, U21, L1, L2, L3, L4, L5, Q1, Q2, Q3, Q4, Q5, Q6, C39, C40, C41, C42, C43, C44, C51, C52, C53, C54, J10

HDMI Output

io · 15 components

Show components

U6, U12, U22, J1, C31, C32, C45, C46, C47, R4, R5, R6, R7, D3, D5

Storage

storage · 6 components

Show components

U7, J6, C33, C34, C56, R23

Wireless / Networking

network · 13 components

Show components

U8, U9, J4, J7, C35, C36, C37, C38, C55, D4, R21, R22, R24

USB Subsystem

io · 8 components

Show components

J2, J3, D1, D2, R8, R9, R10, R11

Debug / JTAG

debug · 9 components

Show components

J5, D6, TP1, TP2, TP3, TP4, TP5, TP6, TP7

APU Decoupling

power · 23 components

Show components

C1, C2, C3, C4, C5, C6, C7, C8, C9, C10, C11, C12, C13, C14, C50, R1, R2, R3, R12, R25, C48, C49, Y1

Front Panel

io · 10 components

Show components

J8, J9, D7, D8, D9, D10, R17, R18, R19, R20

Power Rail Test Points

debug · 8 components

Show components

TP8, TP9, TP10, TP11, TP12, TP13, TP14, TP15

Trace Analysis

68 traces, 68 with connected endpoints.

12power

5debug

51signal