@Carl That is vey disappointing. Considering SMBv1 was depreciated over 10 years ago, and I have devices that are still for sale, including the AX55, it is shocking a protocol that has been vulnerable and replaced for that long is still in use anywhere.
The risk is that if I open up this ancient and highly vulnerable SMBv1 protocol on any of my devices, I am then at much higher risk if I use those devices at home or especially on any other networks. This is truly terrible product development from a company that claims to be building security into thier products.
TP-Link really, really need to hire some security staff and put them to work advising their developers. High-risk vulnerabilities should have been prevented from being included years ago.