Four US states have sued TP-Link Systems, alleging the router maker misled consumers about both the security of its products and its ties to China. The complaints also cite multiple router vulnerabilities, alleged exploitation by Volt Typhoon and Flax Typhoon, and concerns over TP-Link’s disclosure of Chinese legal obligations and supply chain footprint. #TPLink #VoltTyphoon #FlaxTyphoon #SECConsult
Keypoints
- Florida, Iowa, Montana, and Nebraska filed consumer protection lawsuits against TP-Link.
- The states say TP-Link overstated the security of its router products and services.
- The complaints cite exploitation of TP-Link routers in Volt Typhoon and Flax Typhoon campaigns.
- SEC Consult disclosed five flaws affecting TP-Link Aginet devices, including authentication bypass and command injection.
- TP-Link rejected the allegations and said the lawsuits are baseless.
Read More: https://www.securityweek.com/tp-link-faces-state-lawsuits-and-new-scrutiny-over-isp-router-flaws/