To boot, the technology could be riddled with other flaws via its Apache services components, a security vendor says.