| Ubiquiti UniFi Express 7 (UX7)
|
|
Security Grade
Calculator v
|
Ubiquiti UniFi Express 7
Release Date: 2024-10-23 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
None
|
—
|
CAT=（1+2+1+1）/4=2
|
| Known vulnerabilities
|
Rare
|
—
|
|
| Prior attacks
|
None
|
—
|
|
| Updatability
|
Very common
|
—
|
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
—
|
CAT=（2+1+1）/3=2
|
| Communications
|
Encrypted with up-to-date encryption
|
—
|
|
| Storage
|
Encrypted with up-to-date encryption
|
—
|
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
—
|
CAT=（1+1+1+1+1）/5=1
|
| Authentication
|
Secure
|
—
|
|
| Brute-force protection
|
Exist
|
—
|
|
| Event logging
|
Access event logged
|
—
|
|
| Passwords
|
Require change after setup with complexity requirements
|
—
|
|
| Category Score
|
Score: 1 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
UniFi OS (based on Debian Linux) (Companion App: UniFi Network / UniFi (Mobile App))
|
| Hardware (CPU / GPU)
|
CPU: 1.5 GHz quad-core ARM Cortex-A73 • GPU: Integrated (SoC)
|
| Memory & Storage
|
Memory: 3 GB DDR4 • Storage: 128 GB eMMC
|
| Power, Battery & Charging
|
Battery: Not applicable (mains-powered) • Power: USB-C Power Adapter (included, 100-240V AC) • Charging: Not applicable
|
| Display & Camera
|
Display: 1.96" LCM Color Touchscreen • Camera: Not applicable
|
| Sound & Connectivity
|
Sound: Not applicable • Connectivity: Wi-Fi 7 (BE6500), 1× 2.5 GbE WAN, 1× 2.5 GbE LAN, 1× 10/100/1000 LAN, Bluetooth 5.1
|
| Physical (Dimensions & Mass)
|
Dimensions: 106.5 x 106.5 x 158 mm • Mass: 530 g
|
This is a Ubiquiti UniFi Express 7 (UX7), a Wi‑Fi 7 cloud gateway router running UniFi OS based on Debian Linux. It supports regular signed OTA firmware updates, modern encryption for network communication and local storage, IDS/IPS firewall functions, complete user account management, brute‑force login protection and mandatory complex password rules. Few public hardware tampering methods exist, known vulnerabilities are rare and quickly patched by vendor.
