Nokia says they're not aware of any software vulnerability, and I believe them. But if some essential information is transmitted in clear and can be read out or blocked via a small hack to the phone's PCB, then it would be a hardware vulnerability, no? People like hard-modding old digital synthesizers, and a phone is just another kind of DSP device.