TP-Link Sued by Four More U.S. States Over Router Security and China Ties

Summary: Florida, Iowa, Montana and Nebraska sued TP-Link Systems on October 6 over claims it misled buyers about router security and its separation from China, bringing the total to five states after Texas filed in February. The complaints cite HomeShield marketing that "covers all security scenarios," routers no longer receiving fixes such as two Archer AX21 versions, and a Vietnamese factory where only 0.5% of parts by value are sourced in Vietnam.
Why it matters: The suits lean on Microsoft's 2024 finding that TP-Link routers made up most of a China-linked network averaging 8,000 hacked devices active at any time, and on five flaws SEC Consult disclosed October 8 that let an unauthenticated attacker on the same network take full root control of 65 listed models - with fixes delivered only through ISPs, so some owners cannot download them.

Read the original at The Hacker News ↗