FCC Blocks Foreign-made Consumer Routers Over Security Risks

The Federal Communications Commission (FCC) announced a major update to its Covered List, officially prohibiting the approval of new consumer-grade network routers produced in foreign countries.

This regulatory action prevents these new devices from entering the United States market by denying them the required FCC equipment authorization.

The decision stems from a determination by a White House-convened Executive Branch interagency body that foreign-made routers pose an unacceptable risk to national security and the safety of U.S. citizens.

The ban directly addresses critical vulnerabilities within the global hardware supply chain and the growing threat of nation-state cyber operations.

According to the Executive Branch, malicious actors have repeatedly exploited security gaps in foreign-manufactured routers.

These vulnerabilities have been actively weaponized to attack American households, disrupt local networks, conduct espionage, and steal intellectual property.

Regulatory Impact Analysis

Notably, compromised foreign-made routers played a significant role in recent high-profile cyberattacks, including the Volt, Flax, and Salt Typhoon campaigns that heavily targeted critical U.S. infrastructure.

This policy shift aligns with the 2025 National Security Strategy, which emphasizes reducing reliance on foreign powers for core technological components.

Under the Secure and Trusted Communications Networks Act, the FCC cannot independently modify the Covered List and must execute determinations made by national security agencies.

By blocking these routers, the government aims to cut off a primary vector that advanced persistent threats use to disrupt the U.S. economy and national defense systems.

To clarify the scope of this ban, the FCC has outlined exactly which devices are affected by the new Covered List update.

The restrictions are strictly forward-looking and target new hardware attempting to enter the market.

Under the new rules, all new foreign-made router models are banned from receiving FCC equipment authorizations.

However, existing home routers remain completely unaffected, so consumers can safely continue using devices they already own.

Retailers are also permitted to continue importing, marketing, and selling previously approved models that already cleared the FCC authorization process before this ruling.

Finally, exempted foreign models that successfully secure Conditional Approval from national security agencies will still be permitted to enter the market.

Conditional Approval Process

To accommodate global manufacturers and prevent severe disruptions to the availability of consumer electronics, the determination includes an official exemption mechanism.

Producers of foreign-made consumer-grade routers can apply for a Conditional Approval from the Department of War (DoW) or the Department of Homeland Security (DHS).

If these federal security agencies, after rigorous review, determine that a specific device does not pose an unacceptable security risk, the FCC will grant the necessary equipment authorization.

Manufacturers seeking this exemption are encouraged to submit their security documentation and applications directly to the FCC at [email protected].

Follow us on Google News, LinkedIn, and X for daily cybersecurity updates. Contact us to feature your stories.