(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| TP-Link Archer AX73 (AX5400）
|
|
Security Grade
Calculator v
|
TP-Link Archer AX73 (AX5400)
Release Date: 2022-01-20 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
None
|
🔗 Proof
|
Plastic consumer router; no tamper protection; standard off-the-shelf hardware
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
CVE-2026-22226: authenticated command injection in VPN server config on V2; patched in firmware updates
|
| Prior attacks
|
None
|
🔗 Proof
|
No major public compromise of this specific model
|
| Updatability
|
Very common
|
🔗 Proof
|
TP-Link publishes regular firmware updates; V2 receives security patches
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
No
|
🔗 Proof
|
Web/TP-Link ID admin only; no enterprise directory/SSO integration
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
WPA3 / WPA2-PSK / WPA/WPA2-Enterprise (802.1X); HTTPS web UI (optional)
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Configuration stored in flash; no at-rest encryption of settings; USB storage not encrypted by default
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
Local admin account; optional Link ID for cloud management
|
| Authentication
|
Basic
|
🔗 Proof
|
Username/password web UI; no two-factor authentication on local admin
|
| Brute-force protection
|
Basic
|
🔗 Proof
|
Basic lockout after failed login attempts; no rate-limiting by default on WAN
|
| Event logging
|
Partial logging
|
🔗 Proof
|
System/security logs available in web UI; no SIEM integration
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
Forces admin password change on first setup; no default password after initial config
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
TP-Link proprietary embedded OS (Linux-based) (Companion App: TP-Link Tether / Omada app)
|
| Hardware (CPU / GPU)
|
CPU: 1.5 GHz triple-core processor • GPU: None
|
| Memory & Storage
|
Memory: 512 MB • Storage: 128 MB flash
|
| Power, Battery & Charging
|
Battery: None • Power: 12 V DC, 2.5 A adapter • Charging: N/A
|
| Display & Camera
|
Display: LED status indicators only • Camera: None
|
| Sound & Connectivity
|
Sound: None • Connectivity: Wi-Fi 6 AX5400 (5 GHz: 4804 Mbps HE160, 2.4 GHz: 574 Mbps), 1× Gigabit WAN, 4× Gigabit LAN (LAG capable), 1× USB 3.0, 6 external antennas
|
| Physical (Dimensions & Mass)
|
Dimensions: 272.5 × 147.2 × 49.2 mm • Mass: ~650 g
|
AX5400BC is the regional variant code for the TP-Link Archer AX73, a consumer-grade dual-band Wi-Fi 6 (802.11ax) gigabit router released in 2021 (V1) with a V2 refresh around 2022. It is positioned as a mid-to-high-end home router.
Hardware: 1.5 GHz triple-core networking SoC, 512 MB RAM, 128 MB flash. Wi-Fi speeds are AX5400 class — 4804 Mbps on 5 GHz (160 MHz, HE160) plus 574 Mbps on 2.4 GHz, totaling 5400 Mbps. Six external adjustable antennas. Ports: 1 Gigabit WAN, 4 Gigabit LAN (with static link aggregation on two LAN ports), and one USB 3.0 for network storage/print server. Runs TP-Link's proprietary Linux-based firmware, manageable via web UI or the Tether mobile app.
Security features: WPA3 / WPA2-PSK / WPA/WPA2-Enterprise (802.1X), SPI firewall, access control, IP/MAC binding, ALG, HomeShield security suite (real-time IoT protection, malicious site blocking, intrusion prevention, DDoS protection, home network scanner). VPN server support for OpenVPN, PPTP, and L2TP. Admin authentication is local username/password; optional TP-Link ID enables cloud remote management. No built-in 2FA on the local admin interface.
Known vulnerability: CVE-2026-22226 — an authenticated OS command injection in the VPN server configuration module affecting Archer AX73 V2, allowing full admin control after authentication. Patched in later firmware releases. TP-Link continues to ship firmware updates for this model.
