Vodafone Sure Signal

[Tom]

Overnight on July 12, a claim appeared that hackers had found security loopholes in Vodafone Sure Signal which could compromise the security of Vodafone’s network.

We want to reassure our customers that the Vodafone network has not been compromised.

The claims regarding Vodafone Sure Signal,  which is a signal booster used indoors, relate to a vulnerability that was detected at the start of 2010.  

A security patch was issued a few weeks later automatically to all Sure Signal boxes.  

As a result, Vodafone Sure Signal customers do not need to take any action to secure their device.

We monitor the security of all of our products and services on an ongoing basis and will continue to do so.


[Tom]

We've identified just a handful of devices running software which pre-dates the patch we issued to fix this vulnerability (originally issued in February 2010). 

These devices will no longer access our network unless they are carrying the most recent software update. Devices will automatically poll for this update upon being powered up.

The only time a customer could theoretically have been at risk was if they were registered on, and within 50 metres of, a box which the owner had tampered with. This would have required that person to dismantle the device and solder additional components onto it, as well as taking the conscious decision to prevent the device from receiving our automatic software updates.