A White House-ordered review of security risks posed by suppliers to US telecommunications companies found no clear evidence that Huawei Technologies Ltd had spied for China, two people familiar with the probe told Reuters.

Instead, those leading the 18-month review concluded early this year that relying on Huawei, the world's second-largest maker of networking gear, was risky for other reasons, such as the presence of vulnerabilities that hackers could exploit.

These previously unreported findings support parts of a landmark US congressional report last week that warned against allowing Chinese companies Huawei and ZTE Corp to supply critical telecom infrastructure.

But it may douse speculation that Huawei has been caught spying for China.

Some questions remain unanswered. For example, it is unclear if security vulnerabilities found in Huawei equipment were placed there deliberately. It is also not clear whether any critical new intelligence emerged after the inquiry ended.

Aided by intelligence agencies and other departments, those conducting the largely classified White House inquiry delved into reports of suspicious activity and asked detailed questions of nearly 1,000 telecom equipment buyers, according to the people familiar with the probe.

"We knew certain parts of government really wanted" evidence of active spying, said one of the people, who requested anonymity. "We would have found it if it were there."

White House National Security Council spokeswoman Caitlin Hayden declined to comment on the review. A spokesman for Huawei said the company was not familiar with the review but it was not surprised that no evidence of Huawei espionage was found.

Last week's report from the Republican and Democratic leaders of the House Intelligence Committee noted the potential for spying through Huawei gear installed to manage traffic on wireless networks. The committee also criticized Huawei's leadership for failing to provide details about its relationships with Chinese government agencies.

Huawei, whose chief executive officer, Ren Zhengfei, has rejected the House report as unfair and inaccurate. China's Commerce Ministry has also called the accusations "groundless".

"Huawei is a $32 billion independent multinational that would not jeopardize its success or the integrity of its customers' networks for any government or third party. Ever," the company's US spokesman Bill Plummer said on Wednesday.

The House Intelligence Committee's report did not present concrete evidence that either Huawei or ZTE have stolen US data.

Rogers, the report's lead author, stoked concerns by saying some customers had seen routers sending off "very valuable data" to China.

But in the one case a committee staff member pointed out to Reuters, the victim - Leap Wireless International Inc - said that while some of its computers were infected with viruses earlier this year, an investigation found no evidence that the infection was deliberate or that confidential data had been stolen.

Preventive measures

Pressed about why the White House review and unclassified version of the House Intelligence Committee report had not turned up a "smoking gun", two officials familiar with intelligence assessments said US agencies were most concerned about the capability for future spying or sabotage.

More than anything else, cyber experts complained about what they said was poor programming that left Huawei equipment more open than that of rivals to hacking by government agents or third parties.

"We found it riddled with holes," said one of the people familiar with the White House review.

At a conference in Kuala Lumpur last week, Felix Lindner, a leading expert in network equipment security, said he had discovered multiple vulnerabilities in Huawei's routers.

"I'd say it was five times easier to find one in a Huawei router than in a Cisco one," Lindner said.

Lindner, who spent months investigating Huawei code, said the vulnerabilities appeared to be the result of sloppy coding and poor procedures, rather than any deliberate attempt at espionage. Huawei is looking into his findings, he said.

Some in the US government, however, have said the alleged poor security practices at Huawei could be a deliberate cover for future attacks.

One computer scientist, who helped conduct classified US government research on Huawei routers and switches four to six years ago, told Reuters that he had found "back doors" that his team believed were inserted with care.

He said these back doors could enable attackers to install malicious software that would make critical government networks inoperable, allow hackers to gain entry into highly classified systems and enable them to spy on all traffic. He requested anonymity because he was not authorized to discuss the research.

Huawei has denied the existence of these back doors. Plummer also noted that any vendor's gear could be targeted by hackers, and the company would address any vulnerabilities it finds.

The United States' closest allies have rendered a split verdict on Huawei. Earlier this year, Australia barred Huawei from becoming a contractor on the country's National Broadband Network, and Canada said last week that Huawei could not bid to help build a secure national network. In Britain, however, a spokesman for the Cabinet Office said Huawei's products were fully vetted and did not represent a security concern.

Republican Rogers' staff did not respond to questions about the contents of the classified annex or the White House review.