Ubiquiti EdgeRouter X (ER-X)

What this means for you

The top 3 risks, most serious first.

1. Serious

   It’s made abroad, so the FCC’s 2026 foreign-made router rule applies

   The EdgeRouter X is manufactured in China. The FCC foreign manufacture rule applies based on manufacturing origin regardless of brand.

   Source: FCC Equipment Authorization Database ↗
2. Moderate

   EdgeOS is powerful but not hardened by default

   Management services should be restricted to trusted LAN addresses. Default credentials must be changed immediately.

   Do this: Change default admin credentials immediately
3. Moderate

   A Ubiquiti employee was convicted of stealing customer data

   Cloud-connected EdgeRouter accounts may have been affected. Change credentials if you haven't since 2021.

   Source: Ubiquiti disclosure · 2021; former employee convicted ↗

Protections it’s missing

Missing 2 of 8. Has 4 only partly. Has 2 in full.

We check every router for the same 8 protections. Here is how the Ubiquiti EdgeRouter X (ER-X) does.

• Guest access that expires

  Missing

  Guests are removed when they leave and need your approval to reconnect.

  Guest Auto-Expiry

• Made outside China’s legal reach

  Missing

  Not subject to China’s National Intelligence Law.

  Clean Supply Chain

• Blocks unknown devices from joining

  Partly

  New devices stay out until you approve them once, even if they have the Wi-Fi password.

  Zero-Trust Device Admission

• Locks a device to approved sites

  Partly

  A device can reach only the sites you approve. Everything else is blocked.

  Domain Allowlisting

• Separate Wi-Fi passwords per group

  Partly

  Each part of your network gets its own password.

  Granular Password Control

• Watches for attacks in real time

  Partly

  Spots suspicious devices, traffic and known attacks as they happen.

  Active Threat Monitoring

• Keeps smart gadgets away from your computers

  Has it

  Devices are kept apart, so a hacked smart TV can’t reach your laptop.

  Network Segmentation (VLANs)

• Encrypts internet traffic for every device

  Has it

  Traffic leaving your home is encrypted, even from devices that can’t run a VPN app.

  Router-Level VPN

Fix it today

1. 1
   Confirm your router brand

   The ER-X is a Ubiquiti product; the ER605 is a separate TP-Link product.
2. 2
   Restrict management to LAN-only via firewall rules
3. 3
   Apply EdgeOS firmware updates
4. 4
   Change default admin credentials immediately

   Why: EdgeOS is powerful but not hardened by default.
5. 5
   Plan hardware migration per FCC foreign manufacture rule

Other Ubiquiti models