TP-Link routers may be banned due to national security concerns

TP Link has always been the most overrated garbage out there.

I did it 5 years ago and was so happy to throw it all away after two replacements and hours noodling with it.
Ive had nothing but success with them (and many people reading this forum) including countless computer magazines and online tech sources.
Was able to do a two story 3000 sq ft home with a Archer C7 / 1750 some time later a Motorola (Lenovo China Company) 2200 and now in the new home a really nice TP-Link AC3200 Wireless Wi-Fi Tri-Band Gigabit Router (Archer C3200) (on sale $79 in Office Max as a clearance late last year or maybe early this year, after all its an AC model) Never paid more than $100 or so for any of them and far better than anything from a internet provider.

All AC models, never mattered to me with 300/300 and less service over the years. I always got those speeds on my wifi network through multiple walls.

But like any product in life there will be exceptions. One cant deny the success as a company though. I am sure there isnt consumer router maker in the world that doesnt envy them.
 
Last edited:
To correct a previous post #65
I have a Tp-Link AC4000 (Archer C4000) that I picked up in Office Depot less than a year ago. On sale for around $80. Awesome router, older AC tech doesnt matter on my 300/300 Mbps service. Wouldnt matter even on 1 Gb service not that I care. At the time I was able to update the firmware last year to something fairly recent. Maybe 2023 (?) Still it is now "End of life" and no longer supported. I see "Amazon Renewed" section is selling used ones for $100. I paid less for new.

Anyway I think this was one of those more rare lifetime subscriptions to TrendNet Home Care that came with the router and I was not aware of it. I think you can turn it off though, I might have enabled it when I first set up the router. To be clear I NEVER use any type of anti-virus or protection software. I dont believe in it and dont really care but it surprised me.

Anyway, almost one year later. I was going to my health insurance company website and I miss typed it. This came up and made me aware that I must have enabled it.
Screenshot 2025-01-06 at 9.43.04 AM.webp


This is the router to correct my pervious post, Im sure not in production anymore and I picked it up on clearance, still might be some floating around though. Like my past ones, never a hiccup, never a reset get full 300 mbps over wifi.
(not here to debate, just relay experience with the brand and also Motorola/Lenovo which is also China Owned) Last router was Motorola MR 2200 with amazing range in a 3000 sq ft home.

IMG_2465.webp
 
Last edited:
To correct a previous post #65
I have a Tp-Link AC4000 (Archer C4000) that I picked up in Office Depot less than a year ago. At the time I was able to update the firmware last year to something fairly recent. Maybe 2023 (?) Still it is now "End of life" and no longer supported.

Anyway I think this was one of those more rare lifetime subscriptions to TrendNet Home Care that came with the router and I was not aware of it. I think you can turn it off though, I might have enabled it when I first set up the router. To be clear I NEVER use any type of anti-virus or protection software. I dont believe in it and dont really care but it surprised me.

Anyway, almost one year later. I was going to my health insurance company website and I miss typed it. This came up and made me aware that I must have enabled it.
View attachment 257751
This CVE may be of interest to you (or maybe not, since you seem happy with just raw dogging it), since it seems to exploit this feature you've just discovered was enabled, regardless of whether it is active or not:
https://nvd.nist.gov/vuln/detail/CVE-2024-53375

An Authenticated Remote Code Execution (RCE) vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmp_get_sites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionality.

This was resolved in a November, 2024 BETA firmware release, but if your device is no longer supported and not receiving updates, and a quick glance here seems to show the most recent firmware for the V3 hardware is from 2019, V2 hardware is 2023:
https://www.tp-link.com/ca/support/download/archer-c4000/#Firmware

then you are probably out of luck.
 
But yet, I see Hikvision CCTV at many buildings, and Costco still sells TP-Link routers and Dahua/Lorex CCTV.

It’s been a while since I used 3rd party firmware - is DD-WRT still a thing anymore and do they support mesh WiFi?
 
But yet, I see Hikvision CCTV at many buildings, and Costco still sells TP-Link routers and Dahua/Lorex CCTV.

It’s been a while since I used 3rd party firmware - is DD-WRT still a thing anymore and do they support mesh WiFi?
Yeah, DD-WRT is still around, though OpenWRT is more popular now.

Not going to get political, but you may see more progress on this after change in command.
 
But yet, I see Hikvision CCTV at many buildings, and Costco still sells TP-Link routers and Dahua/Lorex CCTV.

It’s been a while since I used 3rd party firmware - is DD-WRT still a thing anymore and do they support mesh WiFi?
HikVision is only banned in government buildings last I knew as this was one of two main camera companies we used.

Largest or close to largest in the world you will find HikVision in almost any serious security installation, banks etc
Also sold anywhere a simple search will show.

TpLink will continue to be sold at any retail outlet in the USA unless it’s banned because of trade disputes. Again a simple search will show.

It’s important to filter out the “noise”. We love to believe the media/its slanted words and it’s sloppy reporting is our friend when it favors our point of view and discount it when it doesn’t.
One just has to ask, show me the proof that any company is directly involved with espionage vs “could be”, “possibly, ect.

I’m no friend of China but let’s not be hypocrites when every product we buy in the USA is produced there OR contains their components. Why let every American company produce products there and then seek to prevent Americans buying directly?

I wouldn’t be surprised to see TpLink banned for sale. Its overwhelming success in the USA has crushed the American manufacturers profit margins and you can bet they are lobbying Washington to stop them. Make a plausible sounding reason and the people will suck it up and agree.
With that said it doesn’t always go over well telling Americans what they buy so it may just be government employees who are controlled.
 
Last edited:
I’m no friend of China but let’s not be hypocrites when every product we buy in the USA is produced there OR contains their components. Why let every American company produce products there and then seek to prevent Americans buying directly?
For the same reason we wouldn't have let the Soviets make our electronics during the Cold War, or are you of the belief that all of the Soviet surveillance and espionage during that period was manufactured by the media as well?

We are far looser than we should be with regulation on stuff being made by and in China, and this has bit us in the rear many times. Poisoned pet food, leaded paint on kids toys, poor QC on outsourced goods. The idea that the Chinese wouldn't take advantage of the opportunity to leverage our insatiable thirst for cheap electronics as an "in" to aid in state surveillance and as a proxy to target government entities that would be shielded against foreign traffic is hopelessly naive.
 
Can people just run OpenWrt ot Gargoyle firmware on those machines and still be fine?
I was thinking that, but what’s to say that those are absolutely legit either? Or anything else…?

The government let most of the country's industrial base go to China but routers and Tic Toc are evil. Makes sense to me.
No, we the people made stupid procurement decisions and chased cheap stuff to save a penny. The offshoring of any domestic manufacturing, not just tech, is due to our buying decisions, and business’ fiduciary responsibility to shareholders over the Nation’s industrial base and job pool.

Yep, it was all fun and games in the name of capitalism to exploit 3rd world labour in Asia, until the revenue from that process turned that 3rd world country into a global super power, then it was like "whoa boy!".
Exactly. And yet the folks who were calling it out were trashed as bad folks, even on here…
 
The idea that TP-Link is inherently less secure is being proposed by the WSJ.

Microsoft is reporting the vulnerability and method of attack. All that Microsoft says is that the majority of the attacks were carried out using TP-Link routers, which, all things equal, would make sense since that particular brand carries the majority of the market share in the US. Google is saying 65%.
And if my recollection of history serves me right, most worms, viruses, etc also came through Microsoft.

Items with the greatest numbers get studied the most. And attacked the most. But to me the I treating thing is that it’s stuff from what seems like a foreign controlled company, being used by their agents. It’s not just sloppy/bad/exploitable code like the MS products of old.
 
For the same reason we wouldn't have let the Soviets make our electronics during the Cold War, or are you of the belief that all of the Soviet surveillance and espionage during that period was manufactured by the media as well?

We are far looser than we should be with regulation on stuff being made by and in China, and this has bit us in the rear many times. Poisoned pet food, leaded paint on kids toys, poor QC on outsourced goods. The idea that the Chinese wouldn't take advantage of the opportunity to leverage our insatiable thirst for cheap electronics as an "in" to aid in state surveillance and as a proxy to target government entities that would be shielded against foreign traffic is hopelessly naive.
Just for the record, dont paint me as naive. I never said I disagree with any of the above. My point has always been the vast majority talks the talk but doesnt walk it. I know China is not personally after me and the American population sadly could care less.

China most likely is already deep into much of our infrastructure and the infrastructure of even components of USA companies. Example was the massive US Treasure Department Breach just last month, not sure if they still know how deep. Social Security Administration etc.
Im sure they are into our electrical grid etc... I only hope we are into theirs.
Im just not a hypocrite, select one subject like a router, when the entire population uses all their electronics and electronics built with China components, including now their homes, TVs, appliances, all security equipments, alarm systems, cameras and electric vehicle components tied into the internet, regardless of where the router was made.
(not into a debate but you paint me in the wrong light on this subject and need the record straight for others)
 
Yes, all routers have end of life and I bet 75% or more of USA routers are there. Canvass your area door to door and ask how many homeowners know if their router is end of life. It doesnt matter any more than everyone's Social Security number is on the dark web as far as choosing one router above. I am certainly qualified to make this statement as having worked with hundreds of homeowner routers.
 
Just for the record, dont paint me as naive. I never said I disagree with any of the above. My point has always been the vast majority talks the talk but doesnt walk it. I know China is not personally after me and the American population sadly could care less.
And that's a big problem. People talk a big game, but when it comes to spending their money, that's often all it is, talk. The Chinese might use your information as an incidental, if it was easily obtained, but the point in going after consumers is generally to gain access to equipment that can be used as proxies to go after targets inside the geofence.
China most likely is already deep into much of our infrastructure and the infrastructure of even components of USA companies. Example was the massive US Treasure Department Breach just last month, not sure if they still know how deep. Social Security Administration etc.
Yes, and that's the point. That attack (per the post you are responding to) was carried out through botnets embedded in the US, botnets consisting of compromised consumer and business equipment. That's the reason why this stuff should be more heavily regulated.
Im sure they are into our electrical grid etc... I only hope we are into theirs.
I am also hopeful this is tit-for-tat.
Im just not a hypocrite, select one subject like a router, when the entire population uses all their electronics and electronics built with China components, including now their homes, TVs, appliances, all security equipments, alarm systems, cameras and electric vehicle components tied into the internet, regardless of where the router was made.
(not into a debate but you paint me in the wrong light on this subject and need the record straight for others)
Just because a vast majority of people do something out of cheapness, ignorance or stupidity, this doesn't invalidate criticism of that decision for being stupid. Look at how many people smoked (and smoke). Look at how many people drink, eat fast food...etc. People intentionally make stupid decisions on the regular on things they know about, now factor in that most of them know close to nothing about cyber security and it's a recipe for disaster.

Also, I think it's important to consider the software side here. China-sourced IC's assembled for a non-Chinese brand running software developed outside of China is less likely to be intentionally crafted for the purposes of cyber espionage. Occurrences here are incidental, usually due to laziness, budget...etc. On the other hand, when the whole product is of Chinese origin, the odds substantially increase that backdoors and security issues with the software are intentional.

This is why the approach is to go after a Chinese company not just the whole Chinese supply chain. And of course cracking down on all electronics from China would also be crippling.
 
Back
Top Bottom