| Raspberry Pi 400
|
|
Security Grade
Calculator v1
|
Raspberry Pi 400
Release Date: 2020-11-02 • Status:
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
None
|
🔗 Proof
|
No model-specific incident identified in reviewed evidence; not proof of absence.
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
OS/platform history; frequency is not quantified for this board.
|
| Prior attacks
|
None
|
🔗 Proof
|
No model-specific in-the-wild incident established by reviewed evidence.
|
| Updatability
|
Very common
|
🔗 Proof
|
APT updates available.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
SSH authenticates peers; application protocols depend on configuration.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
SSH channel only; excludes arbitrary GPIO/application traffic.
|
| Storage
|
No encryption
|
🔗 Proof
|
Assessed ordinary unencrypted installation.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
🔗 Proof
|
Linux users, groups, privileges.
|
| Authentication
|
Basic
|
🔗 Proof
|
Assessed password login; keys can improve it.
|
| Brute-force protection
|
Absent
|
🔗 Proof
|
Assessed without additional ban/lockout configuration.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
Service logs; no complete tamper-resistant audit assumed.
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
Initial credential creation mapping; not forced later rotation.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Raspberry Pi OS (Trixie), compatible 32/64-bit image; documentation-based configuration (Companion App: )
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: 4GB • Storage: microSD
|
| Power, Battery & Charging
|
Battery: • Power: • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity: Wi-Fi; Bluetooth; Ethernet
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
Assessment date: 2026-10-24. Keyboard computer assessed as a networked IoT gateway. This assessment uses a fresh current OS, not the launch-era image with older credential behaviour.
Scope: a network-connected IoT gateway/controller deployment using a compatible current Raspberry Pi OS image, an explicitly enabled SSH service with password authentication, standard unencrypted storage, and no separately configured login-ban service. This is a documentation-based configuration assessment, not a physical inspection or a claim about every deployment. Bare hardware is not a finished secure IoT appliance. Communications scoring concerns SSH remote management; other services require separate review.
Evidence limits: the form offers no Unknown option. None for hardware incidents and prior attacks means none established in the limited reviewed evidence, not proof that no incidents exist. Rare for vulnerabilities is an interpretive present/history mapping, not a measured model-specific frequency or an allegation that every scanned package is installed. The password option approximates initial credential creation; no forced rotation or complexity enforcement is claimed. Grades require administrator review.
Recommended deployment improvements: use unique credentials and key-based remote access, restrict exposed services, protect storage against theft, maintain updates and review service logs. Release date source: https://www.raspberrypi.com/news/raspberry-pi-400-the-70-desktop-pc/
