TP-Link Archer AXE75
From Wiki-IoT
(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
| TP-Link Archer AXE75 | ||
|---|---|---|
|
Security Grade
Calculator v1
|
TP-Link Archer AXE75
Brand: TP-Link Category: Router • Model / Gen: Wi-Fi 6E Archer AXE75 Release Date: 2022-01-01 • Status: In sale Classification Date: 2026-10-21 • [www.tp-link.com/ Official Website] | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | [jvndb.jvn.jp/ja/contents/2024/JVNDB-2024-001002.html 🔗 Proof] | No mass physical-tampering campaign; issues are remote/network. |
| Known vulnerabilities | Very common | [jvndb.jvn.jp/ja/contents/2024/JVNDB-2024-001002.html 🔗 Proof] | CVE-2024-21833 (and CVE-2024-21773, CVE-2024-21821): OS command injection in TP-Link routers including Archer AXE75, allowing remote code execution by a network-adjacent attacker. |
| Prior attacks | Rare | [jvndb.jvn.jp/ja/contents/2024/JVNDB-2024-001002.html 🔗 Proof] | No CISA KEV entry for this model; no known mass exploitation. |
| Updatability | Very common | [www.tp-link.com/ 🔗 Proof] | Regular firmware updates via the Tether app and TP-Link support site. |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | [www.tp-link.com/ 🔗 Proof] | HomeShield cloud and Alexa integration; local admin authentication. |
| Communications | Encrypted with obselete encryption | [www.tp-link.com/ 🔗 Proof] | Management over HTTPS/HTTP with mixed protection; no fully documented at-rest encryption. |
| Storage | No encryption | [www.tp-link.com/ 🔗 Proof] | Router configuration stored in plaintext on the device. |
| Category Score | Score: 3 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | [www.tp-link.com/ 🔗 Proof] | Single admin account with basic roles. |
| Authentication | Basic | [jvndb.jvn.jp/ja/contents/2024/JVNDB-2024-001002.html 🔗 Proof] | Command-injection flaws weaken the authentication boundary. |
| Brute-force protection | Basic | [www.tp-link.com/ 🔗 Proof] | No documented lockout policy. |
| Event logging | Partial logging | [www.tp-link.com/ 🔗 Proof] | Traffic/system logs present; authentication events not exposed as an audit trail. |
| Passwords | Require change after setup | [www.tp-link.com/ 🔗 Proof] | Admin password is set at first setup; complexity enforcement basic. |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | TP-Link firmware (Companion App: Tether) |
| Hardware (CPU / GPU) | CPU: Not publicly specified • GPU: N/A |
| Memory & Storage | Memory: Not publicly specified • Storage: Not publicly specified |
| Power, Battery & Charging | Battery: N/A • Power: AC adapter • Charging: N/A |
| Display & Camera | Display: N/A • Camera: N/A |
| Sound & Connectivity | Sound: N/A • Connectivity: Wi-Fi 6E (2.4/5/6 GHz), Ethernet |
| Physical (Dimensions & Mass) | Dimensions: Not publicly specified • Mass: Not publicly specified |
