References https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140408-CVE-2014-0160 https://datacentersupport.lenovo.com/is/zh/solutions/ht100823 https://blog.nsfocus.net/openssl-bleed/ https://www.heartbleed.com/ https://wuu.wikipedia.org/wiki/%E5%BF%83%E8%84%8F%E5%87%BA%E8%A1%80%E6%BC%8F%E6%B4%9E https://www.antiy.com/response/heartbleed_faq.html https://blog.trendmicro.com.tw/?p=7904 https://exexute.github.io/2019/03/05/cve-2014-0160-%E5%BF%83%E8%84%8F%E6%BB%B4%E8%A1%80%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/ https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Critical_Vulnerability_Information/Heartbleed/ https://zh.wikipedia.org/zh-cn/%E5%BF%83%E8%84%8F%E5%87%BA%E8%A1%80%E6%BC%8F%E6%B4%9E https://www.cnblogs.com/Sylon/p/11747448.html https://blog.csdn.net/seanyang_/article/details/134052968 https://stack.chaitin.com/vuldb/detail/c7ddf30d-d666-4675-9a17-3c35c1f85213 https://blog.nsfocus.net/openssl-bleed/ https://zhuanlan.zhihu.com/p/589872089 https://www.edu.cn/xxh/fei/zxz/201503/t20150305_1235271.shtml https://comate.baidu.com/zh/page/0cy2mvemaj7 https://bbs.sangfor.com.cn/forum.php?mod=viewthread&tid=289163
Related VulnerabilitiesPoCwp-ssl-insecure-content-fixer-fpd: WordPress Plugin SSL Insecure Content Fixer - Full Path DisclosureH3C SSL VPN 安全漏洞AllinSSL存在默认口令CVE-2019-11510: Pulse Connect Secure SSL VPN Arbitrary File ReadPoCCVE-2014-0160: OpenSSL Heartbleed VulnerabilityPoCCVE-2022-42475: Fortinet SSL-VPN - Heap-Based Buffer OverflowPoCCVE-2017-14186: FortiGate FortiOS SSL VPN Web Portal - Cross-Site ScriptingPoCCVE-2022-29383: NETGEAR ProSafe SSL VPN firmware - SQL InjectionPoCCVE-2022-35416: H3C SSL VPN <=2022-07-10 - Cross-Site ScriptingPoCCVE-2024-53704: SSL VPN Session HijackingPoCssl-cert-renewal: SSL/TLS Certificates in AWS IAM about to expire in 30 days