# Unlicensed 6 GHz Wi-Fi Devices (LPI/GVP) Verified to Cause Harmful Interference to Utility Fixed Microwave Links, Threatening Grid SCADA and Public-Safety Communications

> Field testing by Southern Company Services, Lockard & White, and the Electric Power Research Institute (EPRI) near a Southern Co. 6 GHz fixed microwave link between Fortson and Columbus, Georgia found that a single FCC-certified, unlicensed, commercially available Low-Power Indoor (LPI) Wi-Fi device produced enough constant interference to disable the utility communications link for tens of hours per year, versus a design/reliability standard of roughly five minutes annually. Southern Co. reported the results to the FCC on June 23, 2026 (filing 106231367519302), and a coalition led by NRECA, EEI, APPA, and UTC has asked the FCC to halt further certification of unlicensed 6 GHz devices pending independent, real-world coexistence testing.

- **Published:** 2026-07-14T00:00:00Z
- **Last reviewed:** 2026-07-14T00:00:00Z
- **Canonical:** https://intel.threadlinqs.com/threat/TL-2026-1337
- **ID:** TL-2026-1337
- **Severity:** HIGH
- **Category:** ICS_SCADA
- **Status:** ACTIVE
- **Detections:** 9 · **IOCs:** 17 (full data via the Threadlinqs MCP server — Purple tier)

## Description

The 6 GHz band (5.925-7.125 GHz) was opened by the FCC in April 2020 for unlicensed sharing with incumbent licensees, chiefly electric-utility, public-safety, and telecom fixed point-to-point microwave links that carry SCADA telemetry, grid-protection signaling, advanced metering infrastructure (AMI) backhaul, and first-responder communications. The FCC's coexistence framework relies on two device classes and one automated safeguard: Low-Power Indoor (LPI) devices, which operate license-exempt at reduced power with no location-awareness requirement, and Standard-Power / the newly proposed Geofenced Variable Power (GVP) devices, which must query an Automated Frequency Coordination (AFC) system built on the FCC's Universal Licensing System (ULS) incumbent database to avoid transmitting inside a software-defined exclusion zone drawn around each licensed link's beam path.

Field testing conducted by Southern Company Services, engineering firm Lockard & White, and EPRI physically validated what utility trade groups had argued analytically for years: LPI devices, which are exempt from any AFC check and are already sold at retail as ordinary routers, laptops, and cellphones, can and do cause harmful interference to licensed fixed microwave receivers when operated near a link's path. In the Fortson-Columbus, Georgia test, a single such device produced near-constant interference that took the monitored microwave link out of service for a cumulative total of tens of hours annually, roughly two orders of magnitude beyond the ~5-minutes-per-year unavailability standard that utility microwave networks are engineered to meet for SCADA and protective-relay traffic. Southern Co. filed the results with the FCC on June 23, 2026 under filing 106231367519302.

This interference risk is compounded by two structural gaps in the FCC's coexistence design. First, LPI devices are entirely outside the AFC/exclusion-zone protection scheme that governs Standard-Power and proposed GVP devices, so no database check or geofencing prevents an LPI unit from transmitting adjacent to a protected microwave receiver. Second, even for AFC-governed device classes, security researchers have published a GPS-spoofing attack (arXiv:2509.02824) against the location self-reporting used to place a device inside or outside an exclusion zone: an attacker with access to a Standard-Power/GVP access point can spoof its GPS-derived location to the AFC system, causing it to transmit at full power inside a zone the AFC believes is unoccupied, or evade detection as a 'rogue' outdoor access point — a threat vector Aviat Networks separately flags as 'extremely difficult to detect and resolve.' On January 7-8, 2026 the FCC announced it will vote on an Order creating the new GVP device category (up to 24 dBm EIRP) to further expand unlicensed 6 GHz use, over utility- and public-safety-sector objections that the AFC/ULS database is 'often seen to contain inaccurate or outdated location and antenna data,' undermining the exclusion-zone protections GVP depends on.

More than 40,000 licensed 6 GHz fixed-microwave links are deployed across the US, used for cellular backhaul, utility SCADA/telemetry, and public-safety/first-responder communications. On January 26, 2026, NRECA joined EEI, UTC, and APPA in a formal letter urging the FCC to immediately pause further certification of unlicensed 6 GHz LPI devices until rigorous, independent coexistence testing is completed, noting that LPI device manufacturers have refused to participate in or make devices available for such testing while simultaneously seeking FCC certification. The coalition is also asking the FCC to establish a cost-recovery mechanism so licensed utility operators can recoup the cost of identifying and mitigating interference once it occurs. This follows a 2020 legal fight in which utility groups (UTC, EEI, APPA) petitioned the FCC and later litigated in AT&T Services, Inc. v. FCC (D.C. Cir., No. 20-1190) seeking stronger 6 GHz protections for incumbent licensees; the D.C. Circuit declined to stay the FCC's rules on December 28, 2020.

This is not an exploit, malware, or threat-actor campaign: there is no CVE, no CVSS score, no confirmed malicious intent, and no attribution. It is a verified, real-world radio-frequency coexistence failure with direct operational-technology and public-safety consequences — degraded or lost SCADA visibility/control and protective-relay signaling on licensed utility microwave links — arising from ordinary, FCC-certified consumer electronics operating exactly as their unlicensed authorization permits. It is documented here because the operational impact (loss of grid monitoring/control-channel availability) is materially identical to a wireless denial-of-service condition against ICS communications, and because the disclosed GPS-spoofing attack against AFC location-reporting is a genuine, exploitable weakness in the regulatory mitigation that utilities are being asked to rely on.

## MITRE ATT&CK

- T0860 Wireless Compromise
- T0814 Denial of Service
- T1691.002 Reporting Message
- T1691.001 Command Message
- T0826 Loss of Availability
- T0829 Loss of View
- T0837 Loss of Protection
- T0880 Loss of Safety
- T0813 Denial of Control
- T0815 Denial of View
- T0827 Loss of Control
- T1692.002 Reporting Message
- T1692 Unauthorized Message
- T0830 Adversary-in-the-Middle
- T0878 Alarm Suppression

## Sources

- [Test Shows Wi-Fi Devices in 6 GHz Spectrum Can Disrupt Grid](https://www.cooperative.com/news/Pages/Test-Shows-Wi-Fi-Devices-in-6-GHz-Spectrum-Can-Disrupt-Grid.aspx)
- [NRECA Joins Broad Call for Pause in Approval of New 6 GHz Unlicensed Devices](https://www.cooperative.com/programs-services/government-relations/regulatory-issues/Pages/NRECA-Joins-Broad-Call-for-Pause-in-Approval-of-New-6-GHz-Unlicensed-Devices.aspx)
- [Court Denies 6 GHz Band Protection for Utilities; NRECA Seeks New Rules From FCC](https://www.cooperative.com/news/Pages/Court-Denies-6-GHz-Band-Protection-for-Utilities-NRECA-Seeks-New-Rules-From-FCC.aspx)
- [6 GHz Interference Solutions: Protecting Licensed Microwave from Wi-Fi 6E](https://aviatnetworks.com/interference/fcc-6-ghz-gvp-wifi-interference-solutions/)
- [Licensed 6 GHz Links are under threat from all sides](https://aviatnetworks.com/network-performance/licensed-6-ghz-links-are-under-threat-from-all-sides/)
- [How to protect mission critical communication links from Wi-Fi 6E interference](https://blog.aviatnetworks.com/how-to-protect-mission-critical-communication-links-from-wi-fi-6e-interference/)
- [FCC urged to test for 'dangerous' interference from Wi-Fi 6E](https://www.networkworld.com/article/971415/fcc-urged-to-test-for-dangerous-interference-from-wi-fi-6e.html)
- [January 8, 2026 FCC FACT SHEET: Unlicensed use of the 6 GHz Band](https://docs.fcc.gov/public/attachments/DOC-417577A1.pdf)
- [Federal Register: Unlicensed Use of the 6 GHz Band; Expanding Flexible Use in Mid-Band Spectrum Between 3.7 and 24 GHz](https://www.federalregister.gov/documents/2025/03/06/2025-02962/unlicensed-use-of-the-6-ghz-band-expanding-flexible-use-in-mid-band-spectrum-between-37-and-24-ghz)
- [GPS Spoofing Attacks on Automated Frequency Coordination System in Wi-Fi 6E and Beyond](https://arxiv.org/html/2509.02824)

## Full data

Detection queries (Splunk SPL / Microsoft KQL / Sigma) and IOC values require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/threat/TL-2026-1337