中兴公司，世界上第四大手机制造商，同时也是受美国安全检查监控的两家公司之一，表示中兴在美国发售的一款手机中，有安全漏洞问题，研究者表示，这个漏洞会让其他人有机会完全控制手机。
这个安全漏洞影响到了中兴手机里运行安卓系统的Score系列产品。美国研究人员表示，这个漏洞“很罕见”。
云安全公司CrowdyStrike的合伙人Dmitri Alperovitch 称，我从未见过这样的漏洞。，通常称漏洞为木马，任何人只要掌握了固有的密码，都能够进入到被感染的手机里。
中兴手机和中国电信制造商华为科技有限公司，由于和中国政府的关系，在美国的发展已经受到了妨碍，但是目前两家公司并没有对外承认这一点。
上个月，美国国会小组已经出台措施，要检查并清理美国核武器里使用的中兴和华为的技术。
关于中兴手机安全漏洞的报告首次出现在pastebin.com网站上的匿名留言上。随后，其他人也开始指控中兴手机的其他系列手机比如Skate也存在安全漏洞问题。手机密码在网上就可以轻松获取。
中兴公司已经承认在Score上存在的安全漏洞问题，但是否认其他机型上存在安全问题。
中兴在一封电子邮件中公开表示，“中性正在积极地研究一款安全补丁，希望可以在最短的时间里通过无线下载能够将补丁发送给受影响的用户。在补丁发出后，我们会立即通知受影响的用户下载并安装补丁。”
Alperocvitch表示，他的团队已经开始研究这一漏洞，研究发现，这个木马是一个蓄意程序，因为它是更新中兴手机软件的一种方式。他补充道，现在木马的意图到底是恶意程序还是程序编写的失误还没有确定。
很有可能是他们的编程人员的失误，否则就是他们有其他目的，Alperocvitch称。
安全研究人员都发现过安卓和其他操作系统的安全漏洞问题，但是很少发现硬件厂商会存在安全问题。
谷歌发言人目前没有做出任何评论。
ZTE Corp, the world's No.4 handset vendor and one of two Chinese companies under U.S. scrutiny over security concerns, said one of its mobile phone models sold in the United States contains a vulnerability that researchers say could allow others to control the device.
The hole affects ZTE's Score model that runs on Google Inc's Android operating system and was described by one researcher as "highly unusual."
"I've never seen it before," said Dmitri Alperovitch, co-founder of cybersecurity firm, CrowdStrike. The hole, usually called a backdoor, allows anyone with the hardwired password to access the affected phone, he added.
ZTE and fellow Chinese telecommunications equipment manufacturer, Huawei Technologies Co Ltd, have been stymied in their attempts to expand in the United States over concerns they are linked to the Chinese government, though both companies have denied this.
Most such concerns have centered on the fear of backdoors or other security vulnerabilities in telecommunications infrastructure equipment rather than in consumer devices.
Last month a U.S. congressional panel singled out Huawei and ZTE by approving a measure designed to search and clear the U.S. nuclear-weapons complex of any technology produced by the two companies.
Reports of the ZTE vulnerability first surfaced this week in an anonymous posting on the code-sharing website, pastebin.com. Others have since alleged that other ZTE models, including the Skate, also contain the vulnerability. The password is readily available online.
ZTE said it had confirmed the vulnerability on the Score phone, but denied it affected other models.
"ZTE is actively working on a security patch and expects to send the update over-the-air to affected users in the very near future," ZTE said in an emailed statement. "We strongly urge affected users to download and install the patch as soon as it is rolled out to their devices."
Alperovitch said his team had researched the vulnerability and found that the backdoor was deliberate because it was being used as a way for ZTE to update the phone's software. It is a question, he said, of whether the purpose was malicious or just sloppy programming.
"It could very well be that they're not very good developers or they could be doing this for nefarious purposes," he said.
While security researchers have highlighted security holes in Android and other mobile operating systems, it is rare to find a vulnerability apparently inserted by the hardware manufacturer.
A Google spokesman declined to comment.
