Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Compliance

Vodafone Identified Huawei Security Flaw Decade Ago

British telecoms group Vodafone tackled a security flaw with Huawei technology a decade ago, it was revealed Tuesday amid widespread concerns over the Chinese giant developing 5G networks abroad.

British telecoms group Vodafone tackled a security flaw with Huawei technology a decade ago, it was revealed Tuesday amid widespread concerns over the Chinese giant developing 5G networks abroad.

Bloomberg reported that Vodafone, Europe’s biggest mobile phone company, identified hidden so-called backdoors in software that could have handed Huawei unauthorized access to the carrier’s fixed-line network in Italy used to connect to the internet.

The financial news wire cited Vodafone’s security briefing documents from 2009 and 2011.

Vodafone confirmed to AFP that the issues were resolved but stressed it was incorrect to suggest that the flaw could have allowed unauthorized access to Italy’s fixed-line network.

“The ‘backdoor’ that Bloomberg refers to is Telnet, which is a protocol that is commonly used by many vendors in the industry for performing diagnostic functions. It would not have been accessible from the internet,” Vodafone said in an emailed statement.

“The issues were identified by independent security testing, initiated by Vodafone as part of our routine security measures, and fixed at the time by Huawei,” it added.

Responding to the Bloomberg report, Huawei said:

“We were made aware of historical vulnerabilities in 2011 and 2012 and they were addressed at the time. Software vulnerabilities are an industry-wide challenge.”

Advertisement. Scroll to continue reading.

Huawei added in its statement that the Chinese group has “a well established public notification and patching process, and when a vulnerability is identified we work closely with our partners to take the appropriate corrective action”.

Huawei is facing pushback in some Western markets over fears Beijing could spy on communications and gain access to critical infrastructure if allowed to develop foreign 5G networks offering instantaneous mobile data transfer.

The United States is adamantly opposed to Huawei’s involvement because of the firm’s obligation under Chinese law to help its home government gather intelligence or provide other security services when required.

British Foreign Secretary Jeremy Hunt has meanwhile urged caution over the role of Huawei in the UK, saying the government should think carefully before opening its doors to the technology giant to develop next-generation mobile networks.

His comments Monday came after media reports said Prime Minister Theresa May had conditionally allowed Huawei to build the UK 5G network.

Bloomberg added in its report that Vodafone chief executive Nick Read “has joined peers in publicly opposing any bans on Huawei from 5G rollouts, warning of higher costs and delays”.

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Cody Barrow has been appointed as CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

More People On The Move

Expert Insights

Related Content

Vulnerabilities

Less than a week after announcing that it would suspended service indefinitely due to a conflict with an (at the time) unnamed security researcher...

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

CISO Strategy

SecurityWeek spoke with more than 300 cybersecurity experts to see what is bubbling beneath the surface, and examine how those evolving threats will present...

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

CISO Conversations

Joanna Burkey, CISO at HP, and Kevin Cross, CISO at Dell, discuss how the role of a CISO is different for a multinational corporation...

IoT Security

A group of seven security researchers have discovered numerous vulnerabilities in vehicles from 16 car makers, including bugs that allowed them to control car...

Cyberwarfare

WASHINGTON - Cyberattacks are the most serious threat facing the United States, even more so than terrorism, according to American defense experts. Almost half...