Thing is -- the answer is basically: all of them. Any device with GNU Bash installed, any version, is technically vulnerable.

Notable exception: busybox is not gnu. So your wifi router probably doesn't have gnu bash.

But more importantly, not every device exposes Bash such that arbitrary values can be inserted into environment variables. The critical examples where this is possible is in CGI scripts which use Bash for something, and in certain types of DHCP responders, and in restricted shell environments.

A lot of people are just now learning that some web control panels (like Plesk) ship with a set of "test" CGI scripts, one of which is written in Bash. And while almost nobody would write a serious web application in Bash CGI, many of them may have this test script installed.