The Magic Motorsport Korhex boot glitch adapter has several different MASKs: A, B, C, D, E, F, G. Which ECUs does each of these MASKs support?
Check here.
A Mask: Delphi ETC3
B Mask: MG1CS032
C Mask: for feature (not available
yet)
D Mask: MG1CA920
E Mask: MD1CP001
F Mask: MD1CS003
G Mask:
MD1CP007/ MG1CS047
What if some MASKs are missing? No problem — you can 3D print some MASKs by yourself, like this.
Even if you don’t have a MASK at all, it’s still fine. The Magicmotorsport Help section shows you the exact point on the processor where the KORHEX probe needs to be positioned. Just follow the instructions!
Problem: Tried to unlock a Mercedes MD1CP007 ECU with Flex + Korhex programmer.
What concerns me is the LED status:
Software shows Connected
Antenna:
Ready
Voltage: 19 V
But the RGB LED near the USB/power connector keeps
flashing red continuously
According to the Korhex manual, flashing red
indicates an error condition related to voltage or antenna, while green means
ready to use.
This is contradictory, because the software shows that the
antenna is ready and the voltage is present, but the hardware LED still
indicates an error.
Does this indicate a hardware/firmware/power
issue?

Solution:
The red light will flash until you open a protocol that needs Korhex. Once you open a protocol that needs Korhex, the light will become green and when it is actually glitching it’ll become blue.
That’s normal until you open the protocol for glitching and then it will change to green.
It actually needs to see a locked ECU on id for it to even activate,
If it
does an ID and knows it’s unlocked it will remain flashing red.
So the flashing red LED does not necessarily mean there is a fault — it can simply mean that Korhex is connected but not currently engaged with a locked ECU.
Korhex: New Support for Bosch MD1CS069 and MD1CS089.
Flex version 8.26.0.0 is now available
Unlock Bosch MD1CS069 and MD1CS089 ECUs without working on the PCB.
With the latest Flex update, Korhex can now also be used on ECUs installed on commercial and industrial vehicles, accessing the TriCore TC299 processor through a dedicated procedure.
The new solution allows the procedure to be carried out without working on the ECU PCB, simplifying connection operations and reducing working time.
Using the reference positioning mask as indicated in the operating manual, you can identify the glitch point and connect Korhex easily and accurately. Once the connection is established, you can choose whether to complete the procedure directly in Boot Glitch mode or perform the Unlock and then continue programming in Bench mode.
No work on the PCB, fewer steps, and greater operational flexibility.
To use the protocol, an FLS0.20 license or the Flex Full FLS0.5 configuration is required.
Key Insights:
All Bosch MD1CS069 — TC299
All Bosch MD1CS089 — TC299
Working Mode: Boot Glitch
Memories: Read/Write/Checksum Internal Flash, Read/Write EEPROM, Full Backup
Licenses: FLS0.20M/S — FLS0.5M/S
Connect/Glitch Time: ~ 30 seconds
Reading Time: ~ 2 minutes 30 seconds
Writing Time: ~ 2 minutes
Some of the supported vehicles: