(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| Raspberry Pi Compute Module 1
|
|
Security Grade
Calculator v
|
Raspberry Pi Compute Module 1
Release Date: 2014-04-07 • Status:
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
None
|
🔗 Proof
|
No model-specific incident identified in reviewed evidence; not proof of absence.
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
OS/platform history; frequency is not quantified for this board.
|
| Prior attacks
|
None
|
🔗 Proof
|
No model-specific in-the-wild incident established by reviewed evidence.
|
| Updatability
|
Very common
|
🔗 Proof
|
APT updates available.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
SSH authenticates peers; application protocols depend on configuration.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
SSH channel only; excludes arbitrary GPIO/application traffic.
|
| Storage
|
No encryption
|
🔗 Proof
|
Assessed ordinary unencrypted installation.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
🔗 Proof
|
Linux users, groups, privileges.
|
| Authentication
|
Basic
|
🔗 Proof
|
Assessed password login; keys can improve it.
|
| Brute-force protection
|
Absent
|
🔗 Proof
|
Assessed without additional ban/lockout configuration.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
Service logs; no complete tamper-resistant audit assumed.
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
Initial credential creation mapping; not forced later rotation.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Raspberry Pi OS (Trixie), compatible 32/64-bit image; documentation-based configuration (Companion App: )
|
| Hardware (CPU / GPU)
|
CPU: 700MHz single-core Arm11 / BCM2835 • GPU:
|
| Memory & Storage
|
Memory: 512MB • Storage: 4GB eMMC
|
| Power, Battery & Charging
|
Battery: • Power: • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity: Network via carrier and USB Ethernet adapter
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
Assessment date: 2026-10-24. Original Compute Module on a carrier with USB Ethernet. Use a compatible 32-bit Lite image. The cited official retrospective explicitly identifies its launch date. Do not infer production or security-support status from its age; network isolation and package support must be checked for a real deployment.
Scope: a network-connected IoT gateway/controller deployment using a compatible current Raspberry Pi OS image, an explicitly enabled SSH service with password authentication, standard unencrypted storage, and no separately configured login-ban service. This is a documentation-based configuration assessment, not a physical inspection or a claim about every deployment. Bare hardware is not a finished secure IoT appliance. Communications scoring concerns SSH remote management; other services require separate review.
Evidence limits: the form offers no Unknown option. None for hardware incidents and prior attacks means none established in the limited reviewed evidence, not proof that no incidents exist. Rare for vulnerabilities is an interpretive present/history mapping, not a measured model-specific frequency or an allegation that every scanned package is installed. The password option approximates initial credential creation; no forced rotation or complexity enforcement is claimed. Grades require administrator review.
Recommended deployment improvements: use unique credentials and key-based remote access, restrict exposed services, protect storage against theft, maintain updates and review service logs. Release date source: https://www.raspberrypi.com/news/compute-module-3-on-sale-now-from-25/
