Skip to main content

Vodafone found security flaws in Huawei kit years ago

Vodafone has revealed that it found security flaws in equipment provided by Chinese hardware maker Huawei to its Italian business in 2011 and 2012.

The world's second largest mobile operator said that it had found security vulnerabilities in two products though both incidents were quickly resolved by the Chinese firm.

Huawei has faced increased scrutiny as the US has told its allies not to use its technology over concerns of Chinese spying. Back in January, Vodafone paused the deployment of the firm's equipment in its core networks as it waits for Western governments to give the Chinese company full security clearance.

The British government is still deciding what role Huawei's equipment will play in a future 5G network but it plans to announce its final decision in the next month.

A government report released in March criticized the company for failing to fix long-standing security issues. British security officials said that they had found “several hundred vulnerabilities and issues” with Huawei's equipment in 2018.

Security flaws

The software vulnerabilities discovered by Vodafone in 2011 and 2012 were promptly fixed by Huawei and the telecom said that it had found no evidence of any unauthorized access.

A spokesperson for the company provided more details on the vulnerabilities, saying:

“The issues were identified by independent security testing, initiated by Vodafone as part of our routine security measures, and fixed at the time by Huawei.” 

According to Vodafone, the vulnerabilities arose from the use of Telnet which is a protocol used by vendors to perform diagnostic functions. Telnet allows equipment manufacturers to communicate with their products after they have been deployed.

Via Reuters



from TechRadar - All the latest technology news http://bit.ly/2GTJZII

Comments

Popular posts from this blog

The future of Magic Leap's promising AR efforts dim after layoffs

The Magic Leap Two is now further away than ever, unfortunately. Today in a blog post the augmented reality pioneer announced major layoffs and has decided to cut up to half of its workforce, according to some reports. The original Magic Leap One was supposed to be one of the first mainstream augmented reality headsets when it launched in 2018, but a high price point and lack of interest from developers left the headset high and dry after launch. According to the blog post, Magic Leap says it will be focusing its efforts on enterprise solutions (a statement HTC has made recently as well) and shift its focus away from consumer technology… at least for the time being.  The company has been open about creating a second headset that would offer improved specs for some time, but how that work will now have to go forward without half of the team , according to some estimates, remains to be seen. Is the window closing on augmented reality?  Although it’s just one company, Magic...

Airship acquires SMS commerce company ReplyBuy

Airship is announcing that it has acquired mobile commerce startup ReplyBuy . The startup (which was a finalist at TechCrunch’s 1st and Future competition in 2016) works with customers like entertainment venues and professional and college sports teams to send messages and sell tickets to fans via SMS. It raised $4 million in funding from Sand Hill Angels, Kosinski Ventures, SEAG Ventures, Enspire Capital, MRTNZ Ventures and others, according to Crunchbase . Airship, meanwhile, has been expanding its platform beyond push notifications to cover customer communication across SMS, email, mobile wallets and more. But CEO Brett Caine said this is the first time the company is moving into commerce. While sports and concerts tickets might not be a booming market right now, Caine suggested that the company is actually seeing increased purchasing activity “in and around the Airship platform” as businesses try to drive more in-app purchases. He also suggested that both the COVID-19 pandem...