critical WPA2 vulnerabilities afoot, see KRACK attacks (discussion @ /r/KRaCK, HN, /r/netsec, Slashdot)


From WikiDevi
Jump to: navigation, search

Availability: now

FCC approval date: 24 August 2015
Country of manuf.: China

Amazon image

B00TQD2BYK (Flag of the United States.svg, On Amazon, On CCC)

Type: range extender


Power: 100-240 VAC ~ 50/60 Hz, 0.3 A
Connector type: AC (direct)

CPU1: MediaTek MT7620A (580 MHz)
FLA1: 8 MiB
8,388,608 B
65,536 Kib
8,192 KiB
64 Mib
0.00781 GiB
(Winbond W25Q64FVSIG)
RAM1: 64 MiB
67,108,864 B
524,288 Kib
65,536 KiB
512 Mib
0.0625 GiB
(Zentel A3R12E40CBF-8E)

Expansion IFs: none specified
Serial: yes, 4-pin header

WI1 chip1: MediaTek MT7620A
WI1 802dot11 protocols: bgn
WI1 MIMO config: 2x2:2
WI1 antenna connector: U.FL
WI2 chip1: MediaTek MT7610EN
WI2 802dot11 protocols: an+ac
WI2 MIMO config: 1x1:1
WI2 antenna connector: U.FL

ETH chip1: MediaTek MT7620A
ETH chip2: Atheros AR8035-A
LAN speed: 10/100/1000
LAN ports: 1


Stock bootloader: Uboot Ralink

Stock FW OS: Linux 2.6.36

Default SSID: TP-LINK_Extender_2.4GHz (6 addl. devices), TP-LINK_Extender_5GHz (6 addl. devices)
Default IP address:
the IP is used by 642 additional devices
of which 62 are TP-LINK devices
Default login user: admin
Default login password: admin
admin:admin credentials used by 1049 additional devices
of which 209 are TP-LINK devices

802dot11 OUI: none specified

For a list of all currently documented MediaTek chipsets with specifications, see MediaTek.

AC750 Wireless Range Extender

Product page

"2053500117" is silkscreened on the board in the FCC photos.

Hardware appears to be very similar to the Netgear EX6100.

Unit has internal power supply and plugs directly into mains power socket.

Stock firmware only functions as an extender and client bridge and does

not support access point mode.

Basic details[edit]

To get the unit open, remove the two screws at the top. Squeeze the case in the middle

of each side t help loosen the two clips that continue to hold it together.

It takes some force to separate the two halves, but be careful not to damage the short

the antenna cables when the case finally gives.

There is a ceramic heatsink on the CPU - you can remove this to inspect it by giving

it a twist. It will remain adhesive so can be re-attached when finished.




  • J1 is a serial header. Pin 1 is closest to the top
of the unit and pin 4 closest to the Ethernet port.

The pinout is as follows:

© 1 - Tx
© 2 - Rx
© 3 - Gnd
® 4 - Vcc

Connect with settings 57600 8N1. Signalling voltage is 3.3v.

Console output[edit]