Could TP-Link Routers Be Banned in the US?
TP-Link, a dominant name in the US router market, is facing the possibility of a nationwide sales ban. The Commerce, Defense, and Justice departments are investigating the company’s ties to Chinese cyberattacks, perhaps leading to restrictions on the sale of TP-Link routers in the US, according to a recent *Wall Street Journal* report. [[1](https://www.wsj.com/politics/national-security/us-ban-china-router-tp-link-systems-7d7507e6)] As the pandemic, TP-Link has seen a surge in popularity, reportedly increasing its share of the US router market from 20% in 2019 to nearly 65% in 2023. While TP-Link disputes these figures, autonomous analysis from IT platform Lansweeper indicates that TP-Link routers account for 12% of home routers in the US. This potential ban, however, appears to stem more from concerns about TP-Link’s connection to China rather than specific, publicly identified security vulnerabilities in its devices. Cybersecurity experts have highlighted this distinction. “People expect there to be some smoking gun or something in these devices from Chinese manufacturers, and what you end up finding is the exact same problems in every device. It’s not like the Chinese devices are glaringly insecure,” said Thomas Pace, CEO of cybersecurity firm NetRise and a former security contractor for the Department of Energy. “That’s not the risk. The risk is in the corporate structure of every Chinese company.” Founded in Shenzhen, China, in 1996 by brothers Zhao Jianjun and Zhao Jiaxing, TP-Link shifted its headquarters to Irvine, California in October. This move occurred just two months after the House announced an investigation into the company. TP-link maintains that it previously operated dual headquarters in Singapore and Irvine.Watch this: Best Wi-Fi Routers for 2024: A Buying Guide
TP-Link, a popular manufacturer of home networking equipment, has found itself under scrutiny from US government officials due to concerns about potential security vulnerabilities and alleged ties to China. Despite the company’s claims of a secure supply chain and manufacturing primarily in Vietnam, lawmakers have raised alarms about TP-Link routers, citing potential risks associated with Chinese cyberattacks.
In August 2022, the House Select Committee on the Chinese Communist Party urged an official investigation into TP-Link, expressing concerns about the company’s ”unusual degree of vulnerabilities” and its obligation to comply with Chinese law. The committee highlighted the Chinese government’s history of using home office routers like TP-Link for widespread cyberattacks against the United States, amplifying their concerns.
In response to the allegations,TP-Link has asserted that its routers are not more susceptible to hacking than those from other brands. They emphasize that their products have been identified as potential targets for hackers, a common occurrence for many consumer electronics companies. Despite these assurances, CNET has temporarily paused its recommendations for TP-Link routers while the situation is being assessed.
CNET currently features several TP-Link router models on its list of best Wi-Fi routers. However, the company will closely monitor developments in this story and reassess those recommendations as necessary. This decision reflects the growing concern about potential security risks associated with TP-Link routers and the need for thorough investigation.
The situation highlights the increasing scrutiny of technology companies with ties to China and the ongoing debate about cybersecurity threats emanating from the country.
TP-Link Faces Potential Ban Amid Growing Concerns Over Chinese Tech
A potential ban looms over TP-Link, a popular router manufacturer, stemming from concerns about its ties to China rather than any known technical vulnerability. While cybersecurity experts acknowledge that TP-Link routers, like those from all manufacturers, have security flaws, the government has yet to reveal any specific new issues that could lead to a ban. Federal contracting documents cited by the Wall Street Journal reveal that TP-Link routers have been purchased by numerous US government agencies, including the National Aeronautics and Space Governance, the Defense Department, and the Drug Enforcement Administration. This news arrives at a time of growing bipartisan support in Washington for removing Chinese products from US telecommunications. Fueling these concerns is the recent “Salt Typhoon” attack, a cyber espionage operation attributed to Chinese hackers. In October, it was reported that these hackers breached the networks of major US internet providers like AT&T, Verizon, and Lumen (which owns CenturyLink and Quantum Fiber).
TP-Link Faces Potential US Ban: Experts Weigh In
The US government’s potential ban on TP-Link, a Chinese networking equipment manufacturer, has sparked speculation about the reasons behind the decision. While concrete evidence remains elusive,cybersecurity experts believe intelligence agencies may have uncovered vulnerabilities in TP-Link devices. Guido Patanella, senior vice president of engineering at Lansweeper, suggests that the ban stems from deep intelligence within the US government. “Usually this happens before the information becomes public,” Patanella told CNET. He believes the concerns could be related to either hardware flaws or vulnerabilities in the firmware,likening the situation to the scrutiny Huawei faced in 2019.
That year, former President donald Trump issued an executive order effectively banning US companies from using Huawei equipment due to national security concerns.
NetRise CEO, Pace, suggests the possibility of a “zero-day” vulnerability in TP-link devices. A zero-day vulnerability refers to a security flaw unkown to the manufacturer, leaving no time for a fix. However,Pace emphasizes that there is no concrete evidence to support this claim.
“But at least that claim is based in some sort of reality that we are aware of that exists, which is that the PRC (People’s Republic of China) is involved in every Chinese corporation.And that’s undeniable,” Pace said.
Are TP-Link Routers Safe? Exploring Security Concerns
TP-Link, a popular brand of routers and networking devices, has faced scrutiny regarding its security practices.While no router manufacturer is immune to vulnerabilities, several incidents have raised concerns about TP-Link specifically. One metric frequently enough used to assess security is the Cybersecurity and infrastructure Security Agency’s (CISA) list of Known Exploited vulnerabilities. This list shows that TP-link has had two vulnerabilities catalogued, compared to eight for Netgear and 20 for D-Link. However, experts argue that this list may not paint a complete picture.“We’ve analyzed an remarkable amount of TP-link firmware. We find stuff, but we find stuff in everything,” said Thomas Pace, CEO of cybersecurity firm NetRise and former security contractor for the Department of Energy.
High-Profile Security Incidents Highlighting TP-Link Vulnerabilities
despite the limitations of vulnerability lists, specific incidents have targeted TP-Link routers. In October 2024, Microsoft detailed a “nation-state threat actor activity” involving password spraying attacks that had been ongoing for over a year. This type of attack uses a single, common password to try and access multiple accounts. Microsoft stated that TP-Link routers were predominantly used in these attacks.
In a separate incident in May 2023, Check Point Research identified a firmware implant in TP-Link routers linked to a Chinese state-sponsored hacking group. This campaign targeted European foreign affairs entities, but Check Point researchers emphasized that the attack was designed to be ”firmware-agnostic,” meaning it wasn’t specifically targeting TP-Link routers.
These examples highlight the complex security landscape surrounding router manufacturers. While TP-Link has faced scrutiny,it’s important to remember that all technology companies are vulnerable to security threats.
Staying informed about potential vulnerabilities and taking proactive steps to secure yoru network, irrespective of your router brand, is crucial in the ever-evolving digital world.
Are TP-link routers safe to use? While TP-Link routers,like any device connected to the internet,pose potential security risks,these risks aren’t exclusive to TP-Link. Concerns have arisen due to reports of malicious implants found in modified TP-Link firmware, potentially linked to actors with ties to China.
