Congress Scrutinizes TP-Link Routers Over Cybersecurity Concerns
Two members of Congress have urged the U.S. Department of Commerce to investigate the cybersecurity risks associated with Wi-Fi routers manufactured by the Chinese company TP-Link Technologies, and they have also called for a broader investigation into the company itself.
TP-Link, a Chinese firm, is the world’s largest supplier of Wi-Fi products, selling more than 160 million devices annually in over 170 countries. TP-Link Technologies and its partners also hold a leading position in the U.S. Wi-Fi router market. However, concerns have been raised that, since TP-Link routers are manufactured in China using Chinese technology, it may be easier for Chinese government hackers to breach these devices and gain access to American systems.
Further concerns stem from the fact that, under Chinese law, TP-Link is required to disclose U.S. confidential information at the request of Chinese intelligence agencies. The situation is exacerbated by the fact that in 2023, Chinese hackers used TP-Link routers in a campaign targeting politicians in European countries.
In their letter, the lawmakers emphasize that the high vulnerability of TP-Link routers, combined with the company’s obligation to comply with Chinese laws, constitutes a serious threat. This is particularly concerning given that the Chinese government frequently employs TP-Link routers, designed for SOHO networks, as tools for conducting large-scale cyberattacks in the United States.
The Congress members insist that it is imperative to urgently assess and mitigate the threat posed by TP-Link devices. The lawmakers have requested that Secretary Raimondo provide a threat assessment and a plan to address it by August 30.
Related Posts:
- Old Vulnerability, New Attacks: Botnets Swarm Exploited CVE-2023-1389 in TP-Link Routers
- Mirai Botnet Exploits TP-Link Router’s CVE-2023-1389 Vulnerability
- Millions of Routers at Risk: CVE-2024-21833 Threatens TP-Link Devices
- Researchers Uncover Massive Quad7 Botnet Targeting Microsoft 365
- PoC Released for Unauthenticated RCE Vulnerability in TP-Link VIGI NVR4032H Network Video Recorder
