Now Vodafone Group Plc<\/a> has acknowledged to Bloomberg that it found vulnerabilities going back years with equipment supplied by Shenzhen-based Huawei for the carrier\u2019s Italian business. While Vodafone says the issues were resolved, the revelation may further damage the reputation of a major symbol of China\u2019s global technology prowess.<\/p>\n\n\n\n Europe\u2019s biggest phone company identified hidden backdoors in the software that could have given Huawei unauthorized access to the carrier\u2019s fixed-line network in Italy, a system that provides internet service to millions of homes and businesses, according to Vodafone\u2019s security briefing documents from 2009 and 2011 seen by Bloomberg, as well as people involved in the situation.<\/p>\n\n\n\n Vodafone asked Huawei to remove backdoors in home internet routers in 2011 and received assurances from the supplier that the issues were fixed, but further testing revealed that the security vulnerabilities remained, the documents show. Vodafone also identified backdoors in parts of its fixed-access network known as optical service nodes, which are responsible for transporting internet traffic over optical fibers, and other parts called broadband network gateways, which handle subscriber authentication and access to the internet, the people said. The people asked not to be identified because the matter was confidential.<\/p>\n\n\n\n A backdoor, in cybersecurity terms, is a method of bypassing security controls to access a computer system or encrypted data. While backdoors can be common in some network equipment and software because developers create them to manage the gear, they can be exploited by attackers. In Vodafone\u2019s case, the risks included possible third-party access to a customer’s personal computer and home network, according to the internal documents.<\/p>\n\n\n\n The Trump administration, arguing such end-runs around security in Huawei\u2019s equipment could invite espionage by the Chinese state, is trying to persuade Western allies to block the company<\/a> from the next generation of mobile networks. Huawei has repeatedly denied that it creates backdoors and says it\u2019s not beholden to Beijing. <\/p>\n\n\n\n Read more: The U.S. Is Losing a Major Front to China in the New Cold War<\/em><\/a><\/p>\n\n\n\n Huawei\u2019s ability to continue winning contracts from London-based Vodafone, despite the carrier\u2019s security concerns, underscores the challenge facing the U.S. as it tries to hinder the world\u2019s top telecom equipment vendor and No. 2 supplier of smartphones. Huawei is vying against a stable of Western companies including Nokia Oyj<\/a> and Ericsson AB<\/a> to roll out fifth-generation, or 5G, wireless networks.<\/p>\n\n\n\n Vodafone has defended Huawei against the U.S. onslaught, which has placed Europe\u2014Huawei\u2019s largest market outside China\u2014in the middle of a trade battle between two superpowers. At stake is leadership in key areas, principally 5G technology that\u2019s designed to support the internet of things and new applications in industries spanning automotive, energy to healthcare. Vodafone Chief Executive Officer Nick Read has joined peers in publicly opposing any bans on Huawei from 5G rollouts, warning of higher costs and delays. The defiance shows that countries across Europe are willing to risk rankling the U.S. in the name of 5G preparedness.<\/p>\n\n\n In a statement to Bloomberg, Vodafone said it found vulnerabilities with the routers in Italy in 2011 and worked with Huawei to resolve the issues that year. There was no evidence of any data being compromised, it said. The carrier also identified vulnerabilities with the Huawei-supplied broadband network gateways in Italy in 2012 and said those were resolved the same year.<\/em> Vodafone also said it found records that showed vulnerabilities in several Huawei products related to optical service nodes. It didn\u2019t provide specific dates and said the issues were resolved. It said it couldn’t find evidence of historical vulnerabilities in routers or broadband network gateways beyond Italy.<\/p>\n\n\n\n \u201cIn the telecoms industry it is not uncommon for vulnerabilities in equipment from suppliers to be identified by operators and other third parties,\u201d the company said. \u201cVodafone takes security extremely seriously and that is why we independently test the equipment we deploy to detect whether any such vulnerabilities exist. If a vulnerability exists, Vodafone works with that supplier to resolve it quickly.\u201d<\/p>\n\n\n\n In a statement, Huawei said it was made aware of historical vulnerabilities in 2011 and 2012 and they were addressed at the time. A company spokesman said the flaws in the equipment related to maintenance and diagnostic functions common across the industry, as well as vulnerabilities. \u201cThere is absolutely no truth in the suggestion that Huawei conceals backdoors in its equipment.\u201d<\/p>\n\n\n\n However, Vodafone\u2019s account of the issue was contested by people involved in the security discussions between the companies. Vulnerabilities in both the routers and the fixed access network remained beyond 2012 and were also present in Vodafone\u2019s businesses in the U.K., Germany, Spain and Portugal, said the people. Vodafone stuck with Huawei because the services were competitively priced, they said.<\/p>\n\n\n\n While backdoors are common in home routers, they are usually fixed by manufacturers once disclosed, said Eric Evenchick, Principal Research Consultant at Atredis Partners, a U.S. based cybersecurity firm. Evenchick called the situation with Huawei\u2019s equipment \u201cvery concerning.\u201d<\/p>\n\n\n\n![\"\"](\"https:\/\/www.vibewire.com.au\/wp-content\/uploads\/2025\/06\/image-1-1024x683.webp\")
![\"\"](\"https:\/\/www.vibewire.com.au\/wp-content\/uploads\/2025\/06\/Screenshot-2025-06-12-at-2.55.12\u202fPM-1024x877.png\")
<\/figure>\n<\/div>\n\n\n![\"\"](\"https:\/\/www.vibewire.com.au\/wp-content\/uploads\/2025\/06\/image-1024x711.webp\")
![\"\"](\"https:\/\/www.vibewire.com.au\/wp-content\/uploads\/2025\/06\/Screenshot-2025-06-12-at-2.54.14\u202fPM-1024x686.png\")
<\/figure>\n<\/div>\n\n\n