FCC Extends Waiver for Updates to Foreign-Made Routers Through 2029
Summary
The FCC will allow vendors to provide software and firmware updates for foreign-made consumer routers already deployed in the US through at least January 2029. The ban on new models remains in place.
Key points
- The FCC extended the update waiver for already-deployed foreign-made consumer routers in the US through at least January 2029.
- Vendors may provide major software and firmware updates, beyond the limited maintenance and security patches previously allowed.
- The restriction on selling new foreign-made consumer router models in the US remains in place, except for models already approved by the FCC.
- The FCC said the revision is intended to help keep deployed devices safe; experts warned that blocking updates could leave users with aging, unpatched routers.
- Experts advised organizations to maintain zero-trust practices, strong identity checks, and least-privilege access.
Article Details
- Event Type
- FCC policy revision extending and broadening the waiver for software and firmware updates to already-deployed foreign-made consumer routers in the US.
- Impact
- Vendors may provide updates, including major software and firmware updates, through at least January 2029, reducing the risk that deployed routers become unpatched. The restriction on selling new foreign-made consumer router models in the US remains. The revision does not resolve concerns about foreign-manufactured hardware in sensitive network environments.
People
Jason SorokoSectigo senior fellow who commented on the operational risks of leaving deployed routers unpatched and the time and cost of replacing them.Shane BarneyKeeper Security chief information security officer who discussed the waiver’s implications and recommended zero-trust principles, strong identity verification, and least-privilege access.