“These packets included the configured SSID name and password in clear text, identification tokens for the network within a broader database, and an access token for a user session, potentially paving the way for a man-in-the-middle (MITM) attack.”
Belgian consumer group Testaankoop caught the Velop Pro 6E and Pro 7 sending the Wi-Fi name and password in clear text to an AWS server in the US. It warned Linksys in November. Linksys shipped a firmware update that fixed nothing and then stopped answering. A router that leaks the one secret it exists to protect belongs in the return pile.