Old Routers Are a Security Debt Most Households Ignore Until It’s Too Late
The hidden costs of keeping end-of-life network hardware
Most households treat a router like a refrigerator — plug it in, forget it, replace it only when it dies. That calculus misses the compounding risk of running hardware the manufacturer has abandoned. Engadget reports that once a router hits end-of-life status, future vulnerabilities go unpatched, leaving every device on the network exposed.
The security industry calls this “security debt.” Unlike a laptop or phone that nags for updates, a router fails silently. No pop-ups. No forced restarts. The first sign of trouble is often a stranger’s traffic riding your connection or ransomware encrypting a network-attached drive. Botnet operators scan specifically for end-of-life models — Mirai and its descendants built armies this way.
Checking status takes minutes. Locate the model number and hardware revision on the label, then search the manufacturer’s site. ASUS publishes a searchable end-of-life list. Other vendors bury the information in support archives. If the last firmware release is two or more years old, assume support has ended. Engadget notes that ISP-issued gear typically cycles out before this point, but subscribers should verify rather than assume.
Performance debt accrues in parallel. A Wi-Fi 5 router caps at 867 Mbps on 5 GHz. Wi-Fi 6E and 7 hardware can exceed 5 Gbps on the new 6 GHz band — but only if both ends support the standard. Engadget found that pairing a Wi-Fi 7 phone with a five-year-old router wastes the device’s radio entirely. The throughput gap isn’t theoretical. Households with multiple 4K streams, cloud backups, and video conferences feel it as buffering, not as a missed specification.
Failure modes differ from other electronics. Engadget describes a router that began dropping devices, then freezing entirely, then refusing to power on — a cascade over weeks, not a sudden stop. Intermittent disconnections often masquerade as interference or ISP issues. The diagnostic is simple: run a speed test over Ethernet, then over Wi-Fi. If wired is stable and wireless collapses, the radio subsystem is degrading.
Replacement economics favor planning. Emergency purchases limit options to whatever’s in stock at a big-box store. Planned upgrades allow shopping for Wi-Fi 7 gear with 2.5 Gbps or 10 Gbps WAN ports — future-proofing for fiber tiers rolling out now. Mesh systems solve coverage gaps that single routers never could, but they multiply the attack surface: every node needs updates.
The hard deadline isn’t a date on a calendar. It’s the day a vulnerability drops for your model and no patch arrives. That day is unpredictable. The only control is replacing before it happens.
