FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks

Summary: The FCC added foreign-produced mobile robots and networked power inverters to its Covered List on July 28, generally blocking new models from the equipment authorization needed for import, marketing, or sale in the US while leaving previously authorized models and devices already owned unaffected. The robot definition covers ground-locomotion devices over 4.4 lbs with environmental sensors and 200 kbps or faster communications running local or remote control software, and the determinations cite security research including UniPwn's four BLE-related CVEs and CVE-2025-2894 for remote control of Unitree Go1 quadrupeds.
What's compelling: The inverter determination cites Forescout's SUN:DOWN research reporting 46 flaws across Sungrow, SMA, and Growatt products and the potential for fleet manipulation and grid instability, plus a case where a foreign manufacturer remotely disabled inverters after a dispute with a US distributor. The FCC package identifies no confirmed active exploitation campaign against deployed robots or inverters, so the action rests on demonstrated access rather than observed attacks.

Read the original at The Hacker News ↗

Mentions: CVE-2025-2894 CVE-2025-35027