BlueKeep Still Affecting Thousands Of Windows Machines With RDP Bug

BlueKeep Vulnerability has affected Windows in recent years and more than 245,000 Windows machines are still vulnerable to attacks.

It was first disclosed half a year ago. However, Jan Kapriva has suggested that hundreds of thousands of Windows machines are still vulnerable to this bug. Although there’s a significant decline in the number of BlueKeep-affected machines accessible from the internet still there are 240,000 machines that could be vulnerable.

“Given how dangerous and well known BlueKeep is, it rather begs the question of how many other, less well-known critical vulnerabilities are still left unpatched on a similar number of systems,” he added. “And since any of these might potentially come back to haunt us one day, this would seem to be a question worth asking.”

Kopriva discovered the number of vulnerable machines by scanning Shodan search engines for devices. They were discovered before 2020.

According to Kopriva, There are still millions of machines that administrators have failed to patch and are still vulnerable to remote exploitations including, IIS servers, Exim email, OpenSSL, and WordPress websites.

“Given how dangerous and well known BlueKeep is, it rather begs the question of how many other, less well-known critical vulnerabilities are still left unpatched on a similar number of systems,” Kopriva also adds.