US lawmakers believe TP-Link networking products come with an 'unusual degree of vulnerabilities' leaving them vulnerable to hackers

TP-Link Archer GE800 router
(Image credit: Future)

Two US Congressmen have called on the Biden administration to launch an investigation over concerns that networking products made by the widely used TP-Link brand could be used to covertly spy on Americans, or be used for cyber attacks.

Republican Representative John Moolenaar and Democratic Representative Raja Krishnamoorthi have formally requested an investigation from the US Department of Commerce citing national security risks. According to a letter posted by the Select Committee on the Chinese Communist Party (via Reuters), "TP-Link’s unusual degree of vulnerabilities and required compliance with PRC law are in and of themselves disconcerting".

TP-Link products are widely used in the US, and can be found inside critical facilities, including US military bases.

Last year, TP-Link routers were used to launch an attack on European foreign affairs organizations. TP-Link firmware was infected with malware, giving attackers the ability to run shell commands, access files and relay communications between devices on the network. TP-Link is not the only manufacturer that can be exploited. Other manufacturers including Cisco and Netgear have also been used to launch attacks from foreign adversaries.

The request for an investigation is just the latest in the US government's actions against Chinese companies, with Huawei and ZTE being forced out of the US market. TikTok is another well known example of a Chinese company facing similar spying concerns.

Most end users are at least somewhat aware of the need to keep devices and PC software updated for security reasons, but there is far less awareness around the potential for router based attacks. I'd place a wager and suggest that a majority of home users have never updated their router's firmware. Now would be a good time to start.

Best handheld gaming PCSteam Deck OLED reviewBest Steam Deck accessories


Best handheld gaming PC: What's the best travel buddy?
Steam Deck OLED review: Our verdict on Valve's handheld.
Best Steam Deck accessories: Get decked out.

Chris Szewczyk
Hardware Writer

Chris' gaming experiences go back to the mid-nineties when he conned his parents into buying an 'educational PC' that was conveniently overpowered to play Doom and Tie Fighter. He developed a love of extreme overclocking that destroyed his savings despite the cheaper hardware on offer via his job at a PC store. To afford more LN2 he began moonlighting as a reviewer for VR-Zone before jumping the fence to work for MSI Australia. Since then, he's gone back to journalism, enthusiastically reviewing the latest and greatest components for PC & Tech Authority, PC Powerplay and currently Australian Personal Computer magazine and PC Gamer. Chris still puts far too many hours into Borderlands 3, always striving to become a more efficient killer.

Read more
TP-Link AXE75 Wi-Fi 6E router
US congressman calls again for the government to ban Chinese-made TP-Link routers: 'I would not have that in my home'
Netgear Nighthawk XR1000
Netgear says certain router owners should 'download the latest firmware as soon as possible' to patch a critical vulnerability
An FBI wanted poster for alleged hacker Zhou Shuai.
US Justice Dept announces $10 million bounty on at-large 'hacker-for-hire' cabal it says targeted China critics, religious missionaries, and the Treasury
TSMC's Fab 14
China taunts Taiwan with claim that chip foundry TSMC could soon become 'USSMC' or the 'United States Semiconductor Manufacturing Co.'
Semiconductor worker holding a wafer chip.
President Trump wants to kill the $52 billion CHIPS Act: 'a horrible, horrible thing'
A phone displaying the TikTok logo in front of the US flag.
TikTok users wave goodbye to their 'Chinese spies' as they they ditch the app for another, er, Chinese one
Latest in Networking
Netgear Nighthawk XR1000
Netgear says certain router owners should 'download the latest firmware as soon as possible' to patch a critical vulnerability
TP-Link AXE75 Wi-Fi 6E router
US congressman calls again for the government to ban Chinese-made TP-Link routers: 'I would not have that in my home'
An illustration of a silhouetted thief in motion running while carrying a stolen fingerprint. This could represent individuality, identity, privacy concerns, or a concept of personal data being in motion or at risk. The combination of the human form with the unique identifier of a fingerprint offers a visual metaphor for themes such as identity theft, digital security, or the trace we leave behind in a digital age. The overall aesthetic is bold and dynamic, fitting for topics of cybersecurity, personal identity, or discussions about the intersection of humanity and technology.
Hackers hijack over 16,000 TP-Link network devices, creating a big ol' botnet that's absolutely slamming Microsoft Azure accounts
Netgear Nighthawk RS300 Wi-Fi 7 router
Netgear Nighthawk RS300 review
TP-Link Archer GE800 router
US lawmakers believe TP-Link networking products come with an 'unusual degree of vulnerabilities' leaving them vulnerable to hackers
A racing car in F1 2022 game with a cartoon explosion overlayed on top
Today I learned F1 cars can have their engines disabled wirelessly via IP connection
Latest in News
A woman with an arcane slingshot uses it to light a distant fire
Deconstructeam's next game is about training to shoot a single fireball at an impossible target
assassin's creed shadow naoe
We asked two parkour athletes to rate the realism of Assassin's Creed's acrobatics, and a surprising 'crime against parkour' might actually be one of the most realistic things they saw
Mechs fight on the outside of a spaceship
MechWarrior 5: Clans is getting DLC with playable Elementals and a fight on the outside of a spaceship
Aloy - Horizon
'I feel worried about this art form:' Unsurprisingly, the real Aloy from Horizon isn't a fan of AI Aloy
Crying laughing emoji with disturbing realistic elements for REPO
REPO's first update will add a new map and a 'duck bucket' so we can finally give that pesky quacker a time out
Man facing camera
The Day Before studio reportedly sues Russian website for calling infamous disaster-game a 'scam'