TerraMaster F4-424 Pro
Security Evaluation
1. Device Security
2. System Security
3. User Authentication
Technical Specifications
PROVISIONAL CONSERVATIVE SCENARIO — NOT CONFIRMED DEVICE DEFECTS. Unknown items use the upper-bound score by submitter request. The letter grade below is temporary, subject to further evidence and administrator review.
Provisional assessment — not administrator approved
Conservative provisional rating: D; GRAS 8/9.
This is an explicitly assumed upper-bound document-review scenario, not a confirmed dangerousness finding or an administrator-approved classification. On 25 October 2026 the submitter authorized selecting the highest evidence-consistent candidate score for each criterion. A completely unknown item is temporarily scored 3. The selected labels such as Very common, No encryption, No authentication or Absent do NOT establish that those conditions were observed. Unknown is not evidence of absence.
No physical device, installed firmware or actual configuration was inspected. Missing optional hardware parameters remain blank. Administrator-only classification date and calculator-version fields have not been set. The official classification may remain blank until administrator approval.
Scope
原厂TOS系统；这是Pro款，普通F4-424官方为Intel N95。两者须分别处理；磁盘容量不是固有闪存容量。
Calculation
Using the published methodology: ceil(mean of Device 4 criteria)) + ceil(mean of System 3 criteria)) + ceil(mean of User 5 criteria)).
- Device CATS: 3
- System CATS: 3
- User CATS: 2
- GRAS: 8; provisional grade: D
- Evidence-consistent outer range before selecting the conservative scenario: 3–8, candidate grades A+ / A / A- / B / C / D. This is an uncertainty envelope, not a statistical confidence interval.
Criterion assumptions and evidence gaps
| Criterion | Selected CRIS | Candidate scores | Basis |
|---|---|---|---|
| device_known_hardware_tampering | 3 | {1, 2, 3} | Upper-bound assumption; not a demonstrated defect. |
| device_known_vulnerabilties | 3 | {1, 2, 3} | Upper-bound assumption; not a demonstrated defect. |
| device_prior_attacks | 3 | {1, 2, 3} | Upper-bound assumption; not a demonstrated defect. |
| device_updatability | 2 | {1, 2} | Upper-bound assumption; not a demonstrated defect. |
| system_authentication_with_other_systems | 3 | {1, 2, 3} | Upper-bound assumption; not a demonstrated defect. |
| system_communications | 3 | {1, 2, 3} | Upper-bound assumption; not a demonstrated defect. |
| system_storage | 3 | {1, 2, 3} | Upper-bound assumption; not a demonstrated defect. |
| user_authentication_account_management | 1 | {1} | Documented capability under cited scope. |
| user_authentication_authentication | 2 | {1, 2} | Upper-bound assumption; not a demonstrated defect. |
| user_authentication_brute_force_protection | 3 | {1, 2, 3} | Upper-bound assumption; not a demonstrated defect. |
| user_authentication_event_logging | 2 | {1, 2} | Upper-bound assumption; not a demonstrated defect. |
| user_authentication_passwords | 2 | {1, 2} | Upper-bound assumption; not a demonstrated defect. |
Hardware and date limitations
- parent_company: Not established; left blank. 未把品牌所有者、制造商或历史投资人直接等同为母公司；可选字段可暂留空
- release_date: 2024-01-22 中国市场预售公告日，非全球首销日
- type: Computer 网站已有Computer大类；正文注明NAS或KVM用途；不新造子类别
- status: Not established; left blank. 产品页存在不充分证明指定硬件版本仍在售；销售状态可选，待地区/修订状态确认
- operating_system: TerraMaster TOS; security draft scoped to TOS 6 出厂TOS5与可升级6/7不可混写为已安装版本
- gpu: Intel integrated graphics; hardware transcoding H.264/H.265 etc. 具体GPU子型号未在所读规格表证实
- battery: Externally powered; no operating battery specified (RTC backup not assessed) 只描述工作供电方式；不据此断言主板完全没有备份电池
- charging: Not applicable to normal external-power operation 这是有线供电设备的工作充电字段；不涉及给手机充电或PoE输出
- display: HDMI 2.0b output; no integrated screen documented HDMI不等于设备自带屏幕
- camera: Not established; left blank. 型号手册未明确该硬件；留空而非无证据写None
- sound: Buzzer (documented in TOS); 21 dB(A) test noise is not speaker output 蜂鸣器需型号确认；不填成21dB扬声器
Basic and hardware sources
- F4-424 Pro 官方规格 — Processor / Appearance / Security.
- F4-424 Pro 国内预售公告 — 2024-01-22正文.
- 网站产品分类 — Subcategories.
- TOS6 用户管理 — Create / Manage / Advanced Settings.
- TOS6 登录与OTP — Login / OTP Two-Factor Verification.
- TOS6 系统升级及恢复 — Update / Configuration / Restore.
Review status
Document review date: 2026-10-25 (Asia/Shanghai). Provisional scenario requested by the submitter. The numerical calculation above is not a claim of administrator approval. The page must be read back after saving; any CAPTCHA, database error, moderation queue, or missing official grade remains an outstanding submission step.
