Deviceways

Wireless access point

TP-LINK EAP225

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v1.x · Qualcomm Atheros QCA9882 Wi-Fi
Processor: Qualcomm Atheros QCA9563Open hardware record
v2 · Qualcomm Atheros QCA9886 Wi-Fi
Processor: Qualcomm Atheros QCA9561Open hardware record
v3.x · Qualcomm Atheros QCA9886 Wi-Fi
Processor: Qualcomm Atheros QCA9563Open hardware record
v4 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9886 Wi-Fi
Processor / Wi-Fi: Qualcomm Atheros QCA9563 · Wi-Fi chip: Qualcomm Atheros QCA9886Get OpenWrt firmware Release listed · 25.12.6Open device guide Release listed · 25.12.5
v5.x · MediaTek MT7761N / MediaTek MT7762N Wi-Fi
Processor: MediaTek MT7629BA · Wi-Fi chip: MediaTek MT7761N · Wi-Fi chip: MediaTek MT7762NOpen hardware record
v1 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9882 Wi-Fi
Get OpenWrt firmware Release listed · 25.12.6
v2 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9882 Wi-Fi
Get OpenWrt firmware Release listed · 25.12.6
v3 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9886 Wi-Fi
Get OpenWrt firmware Release listed · 25.12.6
v5 · MediaTek MT7629
Get OpenWrt firmware Release listed · 25.12.6
Qualcomm Atheros QCA9886 Wi-Fi · Qualcomm Atheros QCA9563
Open hardware record
v3 · Qualcomm Atheros QCA9886 Wi-Fi
Open hardware record Release listed · 25.12.5
v1 · Qualcomm Atheros QCA9563
Open hardware record Release listed · 25.12.5
v2 · Qualcomm Atheros QCA9563; v2.x · Qualcomm Atheros QCA9882 Wi-Fi
Open hardware record
v3 · Qualcomm Atheros QCA9563
Open hardware record Release listed · 25.12.5
v4.x · Qualcomm Atheros QCA9886 Wi-Fi
Open hardware record
v4 · Qualcomm Atheros QCA9563
Open hardware record Release listed · 25.12.5
v5
Open hardware record Release listed · 25.12.5
Original project github.com

v5 · MediaTek MT7629

Limitations
WiFi and 2nd core
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

tp-link eap225 v1 — device documentation (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
v1

Device details

tp-link eap225 v2 — device documentation (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
v2

Device details

tp-link eap225 v3 — device documentation (github.com)TP-LINK EAP225-Outdoor v3 — TechInfoDepot (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
v3

Device details

tp-link eap225 v4 — device documentation (github.com)

Hardware revision
v4

Device details

tp-link eap225 v5 — device documentation (github.com)Device details — v5 — Source documentation (openwrt.org)

Hardware revision
v5

Device details

TP-LINK EAP225 v1.x — TechInfoDepot (github.com)

Hardware revision
v1.x

Device details

TP-LINK EAP225 v2.x — TechInfoDepot (github.com)

Hardware revision
v2.x

Device details

TP-LINK EAP225 v3.x — TechInfoDepot (github.com)

Hardware revision
v3.x

Device details

TP-LINK EAP225 v4.x — TechInfoDepot (github.com)

Hardware revision
v4.x

Device details

TP-LINK EAP225 v5.x — TechInfoDepot (github.com)

Hardware revision
v5.x

Device details

TP-LINK EAP225-Wall v2 — TechInfoDepot (github.com)

Hardware revision
v2

Device details

TP-LINK EAP225 v1.x — WikiDevi (github.com)

Hardware revision
v1.x

Device details

TP-LINK EAP225 v3.x — WikiDevi (github.com)

Hardware revision
v3.x

Device details

TP-LINK EAP225 v5.x — WikiDevi (github.com)

Hardware revision
v5.x

Device details

TP-LINK EAP225-Outdoor — WikiDevi (github.com)

Hardware revision
-Outdoor

OpenWrt · v1 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9882 Wi-Fi

OpenWrt · v1 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9882 Wi-Fi — Source documentation (openwrt.org)

Availability recorded by source
Discontinued

OpenWrt · v2 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9882 Wi-Fi

OpenWrt · v2 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9882 Wi-Fi — Source documentation (openwrt.org)

Availability recorded by source
Discontinued

OpenWrt · v3 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9886 Wi-Fi

OpenWrt · v3 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9886 Wi-Fi — Source documentation (openwrt.org)

Availability recorded by source
Available 2020

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
v4

OpenWrt · v4 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9886 Wi-Fi

OpenWrt · v4 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9886 Wi-Fi — Source documentation (openwrt.org)

Availability recorded by source
Available 2022

Hardware differences

v5.x · MediaTek MT7761N / MediaTek MT7762N Wi-Fi

TP-LINK EAP225 v5.x — TechInfoDepot (github.com)

Flash chip
Winbond W25Q128JVFQ
Board identifier
2202182230-1.0
Processor
MediaTek MT7629BA
Memory chip
ESMT M15T1G1664A-DEB
Wi-Fi chip
MediaTek MT7761N
Wi-Fi chip
MediaTek MT7762N
Technical references

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 8.1 (v3.1)

AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)

A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and Tp-Link…

CVE-2023-49134

Affected firmware
v5.1.0 Build 20220926
Fix
Fix details in the linked record
Read talos CVE record
Details and sources
CVE updated

A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point (EAP115 V4) v5.0.4 Build 20220216. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.This vulnerability impacts `uclited` on the EAP115(V4) 5.0.4 Build 20220216 of the N300 Wireless Gigabit Access Point.

CVE published

CVSS 8.1 (v3.1)

AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)

A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and Tp-Link…

CVE-2023-49133

Affected firmware
v5.1.0 Build 20220926
Fix
Fix details in the linked record
Read talos CVE record
Details and sources
CVE updated

A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point (EAP115 V4) v5.0.4 Build 20220216. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.This vulnerability impacts `uclited` on the EAP225(V3) 5.1.0 Build 20220926 of the AC1350 Wireless MU-MIMO Gigabit Access Point.

CVE published

CVSS 7.5 (v3.1)

AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)

A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926

CVE-2023-48724

Affected firmware
v5.1.0 Build 20220926
Fix
Fix details in the linked record
Read talos CVE record
Details and sources
CVE updated

A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted HTTP POST request can lead to denial of service of the device's web interface. An attacker can send an unauthenticated HTTP POST request to trigger this vulnerability.

CVE published

CVSS 7.4 (v3.1)

AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)

A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926

CVE-2023-49074

Affected firmware
v5.1.0 Build 20220926
Fix
Fix details in the linked record
Read talos CVE record
Details and sources
CVE updated

A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of network requests can lead to reset to factory settings. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.

CVE published

CVSS 7.2 (v3.1)

AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build…

CVE-2023-49913

Affected firmware
v5.1.0 Build 20220926
Fix
Fix details in the linked record
Read talos CVE record
Details and sources
CVE updated

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerability refers specifically to the overflow that occurs via the `action` parameter at offset `0x422448` of the `httpd` binary shipped with v5.0.4 Build 20220216 of the EAP115.

Check more security advisories for this device · CVE.org