A new IE vulnerability has been disclosed. Using a XXE attack, users using Internet Explorer that open an MHT file will have local files sent to the attacker's web server. You can find more info about this in
our blog post.
The report below provides an overview of all Windows assets in your network and whether they have an Internet Explorer feature installed or not.
If you would like to disable IE on Windows 10 machines, you can do so with this deployment package:
https://www.lansweeper.c...Disable-IE11-on-W10.aspxWe've also created a video tutorial to run the report and deploy the package.
Instructions to add this report to Lansweeper can be found here:
https://www.lansweeper.c...How-to-run-a-report.aspxCode:
Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tblAssets.Username,
tblAssets.Userdomain,
Case
When tblAssets.AssetID = Feature.AssetID Then 'At Risk'
Else 'Safe'
End As [At Risk/Safe],
Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon,
tblAssets.IPAddress,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.SP,
tblAssets.Lastseen,
tblAssets.Lasttried,
Case
When tblAssets.AssetID = Feature.AssetID Then '#ffadad'
Else '#d4f4be'
End As backgroundcolor
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Left Join tsysOS On tblAssets.OScode = tsysOS.OScode
Left Join (Select Top 1000000 tblAssets.AssetID
From tblAssets
Inner Join tblFeature On tblAssets.AssetID = tblFeature.AssetId
Inner Join tblFeatureUni On tblFeatureUni.featUniID =
tblFeature.featUniId
Where tblFeatureUni.featureCaption Like '%Internet Explorer%') As Feature
On Feature.AssetID = tblAssets.AssetID
Where tsysOS.OSname Is Not Null And tblState.Statename = 'Active' And
tsysAssetTypes.AssetTypename = 'Windows'
Order By tblAssets.Domain,
tblAssets.AssetName
