(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| Raspberry Pi Compute Module 5
|
|
Security Grade
Calculator v
|
Raspberry Pi Compute Module 5
Release Date: 2024-11-27 • Status:
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
None
|
🔗 Proof
|
No model-specific incident identified in reviewed evidence; not proof of absence.
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
CVE-2026-13199 affects older CM5 EEPROM firmware; fixed in rpi-eeprom 28.22-1.
|
| Prior attacks
|
None
|
🔗 Proof
|
No model-specific in-the-wild incident established by reviewed evidence.
|
| Updatability
|
Very common
|
🔗 Proof
|
APT updates available.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
SSH authenticates peers; application protocols depend on configuration.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
SSH channel only; excludes arbitrary GPIO/application traffic.
|
| Storage
|
No encryption
|
🔗 Proof
|
Assessed ordinary unencrypted installation.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
🔗 Proof
|
Linux users, groups, privileges.
|
| Authentication
|
Basic
|
🔗 Proof
|
Assessed password login; keys can improve it.
|
| Brute-force protection
|
Absent
|
🔗 Proof
|
Assessed without additional ban/lockout configuration.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
Service logs; no complete tamper-resistant audit assumed.
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
Initial credential creation mapping; not forced later rotation.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Raspberry Pi OS (Trixie), compatible 32/64-bit image; documentation-based configuration (Companion App: )
|
| Hardware (CPU / GPU)
|
CPU: 2.4GHz quad-core Arm Cortex-A76 • GPU:
|
| Memory & Storage
|
Memory: • Storage:
|
| Power, Battery & Charging
|
Battery: • Power: • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity: Optional dual-band Wi-Fi and Bluetooth; Gigabit Ethernet via carrier
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
Assessment date: 2026-10-24. CM5 on a suitable carrier. The official security page specifically lists CVE-2026-13199 affecting older CM5 EEPROM firmware, fixed by rpi-eeprom 28.22-1. Verify the installed EEPROM package and reboot after applying the fix. The present assessment does not claim every unit remains vulnerable.
Scope: a network-connected IoT gateway/controller deployment using a compatible current Raspberry Pi OS image, an explicitly enabled SSH service with password authentication, standard unencrypted storage, and no separately configured login-ban service. This is a documentation-based configuration assessment, not a physical inspection or a claim about every deployment. Bare hardware is not a finished secure IoT appliance. Communications scoring concerns SSH remote management; other services require separate review.
Evidence limits: the form offers no Unknown option. None for hardware incidents and prior attacks means none established in the limited reviewed evidence, not proof that no incidents exist. Rare for vulnerabilities is an interpretive present/history mapping, not a measured model-specific frequency or an allegation that every scanned package is installed. The password option approximates initial credential creation; no forced rotation or complexity enforcement is claimed. Grades require administrator review.
Recommended deployment improvements: use unique credentials and key-based remote access, restrict exposed services, protect storage against theft, maintain updates and review service logs. Release date source: https://www.raspberrypi.com/news/compute-module-5-on-sale-now/
