important · Wi-Fi — Router
A LAN observer can recover the administrator password from an Archer AX55 v4 login session.
Affects
TP-Link Archer AX55 V4, a consumer Wi-Fi router running embedded firmware.
After capturing an administrator's HTTP login on the LAN, the observer can use a device-wide RSA-1024 private key and weakened AES session key to decrypt and reuse the password.
Detail and 2 sources
Firmware 1.2.1 Build 20260527 fixes the login flaw.