You do not have permission to edit this page, for the following reasons:
Assessment date: 2026-10-24. CM5 on a suitable carrier. The official security page specifically lists CVE-2026-13199 affecting older CM5 EEPROM firmware, fixed by rpi-eeprom 28.22-1. Verify the installed EEPROM package and reboot after applying the fix. The present assessment does not claim every unit remains vulnerable. Scope: a network-connected IoT gateway/controller deployment using a compatible current Raspberry Pi OS image, an explicitly enabled SSH service with password authentication, standard unencrypted storage, and no separately configured login-ban service. This is a documentation-based configuration assessment, not a physical inspection or a claim about every deployment. Bare hardware is not a finished secure IoT appliance. Communications scoring concerns SSH remote management; other services require separate review. Evidence limits: the form offers no Unknown option. None for hardware incidents and prior attacks means none established in the limited reviewed evidence, not proof that no incidents exist. Rare for vulnerabilities is an interpretive present/history mapping, not a measured model-specific frequency or an allegation that every scanned package is installed. The password option approximates initial credential creation; no forced rotation or complexity enforcement is claimed. Grades require administrator review. Recommended deployment improvements: use unique credentials and key-based remote access, restrict exposed services, protect storage against theft, maintain updates and review service logs. Release date source: https://www.raspberrypi.com/news/compute-module-5-on-sale-now/
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
