+ A
A -
Reuters
LONDON/SAN FRANCISCO
Huawei Technologies is facing increased scrutiny in Britain because it is using an ageing software component sold by a firm based in the United States, one of the countries where lawmakers allege its equipment could facilitate Chinese spying, sources told Reuters.
The fact that the British misgivings stem in part from Huawei's relationship with a US company shows how trade wars and heightened national security concerns are making it harder for technology firms and governments to safeguard products and communication networks.
A report last month by a British government oversight board charged with analysing Huawei equipment said it had found technical and supply chain"shortcomings"which exposed the country's telecoms networks to new security risks.
One of those is due to Huawei's use of the VxWorks operating system, which is made by California-based Wind River Systems, said three people with knowledge of the matter, all of whom spoke on condition of anonymity when discussing details which were not made public in the report.
The sources said the version of VxWorks being used by Huawei will stop receiving security patches and updates from Wind River in 2020, even though some of the products it is embedded in will still be in service, potentially leaving British telecoms networks vulnerable to attack.
"Third party software, including security critical components, on various component boards will come out of existing long-term support in 2020, even though the Huawei end of life date for the products containing this component is often longer,"the July report, which did not name VxWorks, said.
US and Australian lawmakers have said Huawei's products can be used to facilitate Chinese espionage operations, an allegation the world's biggest producer of telecoms equipment has repeatedly denied.
All three sources said there was no indication that the VxWorks mismatch was deliberate. There is also no suggestion that the software itself represents a security risk.
Reuters was not able to establish which Huawei products were involved or what steps the Chinese company was taking to address the issue.
A spokeswoman for Wind River Systems said she was unable to comment on Huawei, but said the company often helped customers upgrade to newer software versions."Wind River offers migration routes and paths for its customers, which should be pretty well known and understood in the industry,"she said.
A Huawei spokesman declined to comment on specific issues in the report but said the company would address any areas for improvement which were raised by British authorities.
"Cyber security remains Huawei's top priority, and we will continue to actively improve our engineering processes and risk management systems,"he said.
While the United States and Australia have moved to restrict the use of its gear due to security concerns, Huawei has been deepening ties with Britain, supplying broadband equipment to its largest telecoms provider, BT Group, and mobile networks for wireless giant Vodafone Group.
Consultant Edward Amoroso, a former chief security officer at AT&T, said Huawei's experience in Britain showed the challenges of securing international supply chains.
