Short answer - layer 2 - they're just a dumb bridge, basically a 2-port switch.
Long answer - Most of them have an IP stack and even a web interface that the user never sees, so strictly speaking they'd be layer 7 devices. But by that standard, so is any modern managed switch.