You do not have permission to edit this page, for the following reasons:
'''Evidence review addendum — 2026-10-24. Public-document review; ratings with evidence gaps remain provisional.''' This addendum supersedes earlier inconsistent wording on the same fields. It is based on public documents and the saved website snapshot; no installed device was tested. Historical research below remains historical evidence. Unverified flash protection and interface-specific controls are not verified device facts. == Documented basic information == * 尺寸: 243 × 160.6 × 32.5 mm (W×D×H; official V2 RU datasheet) [https://static.tp-link.com/resources/document/Archer_C7_V2-Datasheet-RU.pdf Source] * 电源: DC 12 V, 2.5 A (official V2 RU datasheet; check regional adapter label) [https://static.tp-link.com/resources/document/Archer_C7_V2-Datasheet-RU.pdf Source] [https://www.tp-link.com/tr/home-networking/wifi-router/archer-c7/v2/?app=t Source] * 连接方式: 2.4/5 GHz Wi-Fi AC1750; 1 Gigabit WAN + 4 Gigabit LAN; 2 USB 2.0 [https://static.tp-link.com/resources/document/Archer_C7_V2-Datasheet-RU.pdf Source] [https://static.tp-link.com/res/down/doc/ArcherC7(US)_V2.0_UG.pdf Source] == Revised security evidence notes == * 闪存存储加密: A 2017 thesis documents an Archer C7 V2 sample and U-Boot layout. It does not establish at-rest encryption of current regional stock firmware. The storage score is provisional. [https://www.jku.at/fileadmin/gruppen/177/Hoeller_2017_MasterThesis_AutomaticUpdatesforIoTdevicesexemplifiedbyOpenWRT.pdf Source] [https://static.tp-link.com/res/down/doc/ArcherC7(US)_V2.0_UG.pdf Source] * 防暴力破解: TP-Link describes temporary blocking after repeated login errors in general guidance. Applicability to Archer C7 V2 EU 241108 or US 260427 has not been verified. [https://www.tp-link.com/de/support/faq/1396/ Source] [https://static.tp-link.com/res/down/doc/ArcherC7(US)_V2.0_UG.pdf Source] [https://www.tp-link.com/us/support/download/archer-c7/v2/ Source] * 密码规则: In a V2 thread identifying firmware 180305, TP-Link support says initial setup requires creating a password and rejects admin as that password. The selected later regional builds remain unverified. [https://community.tp-link.com/us/home/forum/topic/548780?moduleId=2414 Source] [https://static.tp-link.com/res/down/doc/ArcherC7(US)_V2.0_UG.pdf Source] [https://www.tp-link.com/us/support/download/archer-c7/v2/ Source] == Scoring status == Existing selected scores are a saved comparison baseline, not newly validated final scores. Recheck version, region and assessment path before updating options. Recalculate CATS/GRAS and synchronize this section after all selected options are settled. Do not infer a secure or insecure flash state from a downloadable firmware image or encrypted data volumes. ---- '''Research assessment reviewed 2026-10-22. This grade is an assessor risk profile based on the stated evidence and inferences, not a test or certification of an individual installed device.''' == Assessment scope and limits == Hardware V2, stock firmware. Match country: advisory fix references EU_V2_241108 and US_V2_260427. No cross-region installation assumed; US V2 manual is historical evidence. Historical vulnerability evidence, current documented capabilities and assessor inferences are identified separately in the comments. Historical-build findings are not asserted in every patched build. Configuration-dependent benefits apply only when the specified settings are enabled. The rubric does not define numerical Rare/Very common thresholds; qualitative mappings are explained. DATE PROXY approved for this review: 17 December 2013 is the vendor-listed first Archer C7 V2 firmware publication (131217), not a verified regional first-sale date. [https://www.tp-link.com/ca/support/download/archer-c7/v2/ Archer C7 V2 first firmware publication] == Calculation cross-check == Device CRIS 2, 3, 2, 2, CATS 3. System CRIS 2, 3, 3, CATS 3. User Authentication CRIS 2, 2, 2, 2, 2, CATS 2. GRAS 8; expected Grade D. [https://fehmijaafar.net/wiki-iot/index.php/Methodology Methodology] == Historical vulnerabilities and remediation == === CVE-2023-50224: Improper authentication / credential disclosure === * Affected scope: Vendor explicitly includes Archer C7 V2/V3; earliest affected builds unspecified. * Preconditions: Network-adjacent access to vulnerable httpd. * Impact: Sensitive information disclosure, including stored credentials. * Remediation: EU V2 241108; US V2 260427. Match region and hardware. * Severity: Numeric score not independently verified; omitted. * Evidence: [https://www.tp-link.com/uk/support/faq/5058/ Archer C7 legacy vulnerability advisory]
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
