FCC Bans Foreign-Made Wi-Fi Routers: Implications and Industry Response

On March 23, 2023, the Federal Communications Commission (FCC) announced a ban on the sale of new foreign-made Wi-Fi routers, citing "unacceptable risks" to national security. This sweeping order affects nearly all routers available in the U.S. market, as most are manufactured or assembled outside the country. The ban does not apply to existing routers already authorized by the FCC, allowing consumers to continue using their current devices without immediate concern.

CNETCNET

The FCC's order specifies that any router with any major stage of production occurring outside the U.S. is considered foreign-made. This includes well-known brands like TP-Link, Asus, and Netgear, with approximately 60% of routers in the U.S. manufactured in China. The FCC has indicated that routers produced abroad were implicated in significant cyberattacks, including the Volt, Flax, and Salt Typhoon incidents, which exploited vulnerabilities in devices to access sensitive networks.

CNETCNET

Router manufacturers are currently scrambling to apply for "Conditional Approval" from the FCC, which would allow them to sell new models and continue issuing necessary firmware updates. However, as of now, no exemptions have been granted. Experts recommend consumers hold off on purchasing new routers until more clarity emerges regarding which models will be exempt from the ban.

CNET

Rik Ferguson, vice president of security intelligence at Forescout, emphasized the risks associated with outdated devices, stating, "If you find yourself in a situation where that update pipeline has been switched off, then you definitely have to consider whether you want to keep using that device."

CNET

Critics argue that the FCC's approach is overly broad and may inadvertently harm consumers. William Budington from the Electronic Frontier Foundation described the ban as "an extremely blunt instrument," suggesting it could impact many harmless products while failing to effectively address the underlying security issues. Additionally, experts have noted that the ban may not significantly alter the manufacturing landscape, as companies may choose to wait for the ban to be lifted rather than relocate production.

CNET

There is uncertainty regarding which specific router brands will be affected by the ban. While the FCC has not disclosed a detailed list, it is clear that most major manufacturers, including Netgear, Asus, and D-Link, will be impacted due to their international supply chains. The only notable exception is Starlink, which claims its routers are manufactured in Texas.

CNET

As the situation develops, consumers are advised to monitor updates from the FCC regarding the Conditional Approval process. Experts predict that more information will emerge within the next month, potentially clarifying which routers will remain compliant and safe for use. Until then, individuals are encouraged to consider their options carefully, especially if they rely on routers rented from Internet Service Providers (ISPs), which also depend on foreign-made components.

CNET

• “This is using an extremely blunt instrument, and it’s going to impact many harmless products in order to stem a real problem,” — William Budington, Technologist, Electronic Frontier Foundation

CNET

• “If you find yourself in a situation where that update pipeline has been switched off, then you definitely have to consider whether you want to keep using that device.” — Rik Ferguson, Vice President of Security Intelligence, Forescout

CNET

• “Placing all manufacturers and their supply chains under the same scrutiny is a positive step in the direction of making the router industry more secure,” — TP-Link Systems Inc. Representative

CNET

The FCC's ban on foreign-made routers marks a significant shift in U.S. cybersecurity policy, with far-reaching implications for consumers and the router manufacturing industry.

CNET