— John Matherly (@achillean) 22 gennaio 2017
Now the Shodan CEO John Matherly revealed that more than two years after its disclosure, about 200,000 services remain affected by the Heartbleed flaw due to the usage of unpatched OpenSSL instances.
Most of the vulnerable installations are located in the United States (42,032), followed by Korea (15,380), China (14,116), and Germany (14,072).
According to Matherly, the list of top affected organizations includes IT giants like Amazon, Verizon Wireless, German ISP Strato, OVH, 1&1 Internet, and Comcast.
The most affected product is Apache HTTP Server (httpd), in particular versions 2.2.22 and 2.2.15. Top operating system is Linux 3.x, followed by Linux 2.6.x and Windows 7/8. According to the report published by Shodan, more than 70,000 devices run services with expired SSL certificates.
(Security Affairs – OpenSSL, Heartbleed)
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.