The US has raised concerns about national security threats posed by foreign-manufactured routers. The Federal Communications Commission (FCC) has extended its ban, previously applied to foreign-made drones, to include consumer networking equipment. This move prohibits the importation of new foreign-made routers unless manufacturers can obtain a special exemption. Currently authorized devices can still be used and imported, but the rule impacts future imports, as most routers are manufactured abroad. To continue selling in the US, manufacturers must either secure conditional approval to establish US manufacturing or decide to exit the US market, as seen with drone maker DJI. The FCC’s National Security Determination justifies these measures by citing economic, national security, and cybersecurity risks linked to foreign-made routers, implicating them in several past cyberattacks. The FCC’s Covered List specifically targets consumer-grade routers designed for home installation, as defined in a NIST report. Although vulnerabilities have been identified in routers over the years, simply moving production to the US does not necessarily address these security concerns.
