TP-Link routers have been shipping routers that have password-protected access enabled by default. An attacker could deduce the device’s password in seconds using packet capture tool Wireshark. The default Wi-Fi password on some of the devices is based on the devices’ MAC address, experts say. The appearance of security is worse than having no security at all because it lulls users into having a false sense of security, they say. If router manufacturers can’t get it right either, that bodes poorly for many of the millions of Internet of Things devices now being shipped.”]
Source: https://www.inforisktoday.com/blogs/tp-link-routers-fail-sniff-test-p-2044