Notification

Icon
Error

Winrar Vulnerability Report

Posted: Friday, February 22, 2019 3:17:16 PM(UTC)
Esben.D

Esben.D

Member Administration Original PosterPosts: 2,067
0
Like
We've released a new blog post about the recent Winrar vulnerability. If you're interested in the specifics, I suggest you give the blog post a read.

The report below will give you a color-coded overview of all Windows assets in your network that are not on Winrar version 5.7 or higher.

Instructions to add this report to your Lansweeper installation can be found here: https://www.lansweeper.c...How-to-run-a-report.aspx

The report will list assets that meet the following criteria:
  • The asset is a Windows Asset.
  • The asset is Active.
  • The asset has Winrar installed on it.
Code:
Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tsysAssetTypes.AssetTypename As AssetType,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tsysOS.OSname As OS,
  tblAssets.SP,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  tblSoftwareUni.softwareName As Software,
  tblSoftware.softwareVersion As Version,
  tblSoftwareUni.SoftwarePublisher As Publisher,
  Case
    When tblSoftwareUni.softwareName Like '%winrar%' And
      tblSoftware.softwareVersion < '5.70' Then 'Vulnerable'
    Else 'Safe'
  End As Vulnerablity,
  tblSoftware.Lastchanged,
  Case
    When tblSoftwareUni.softwareName Like '%winrar%' And
      tblSoftware.softwareVersion < '5.70' Then '#ffadad'
    Else '#d4f4be'
  End As backgroundcolor
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
  Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
  Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblSoftwareUni.softwareName Like '%winrar%' And tblState.Statename =
  'Active'
Order By tblAssets.IPAddress Desc

Active Discussions

Lansweeper Chrome 95 Audit
by  Esben.D  
Go to last post Go to first unread
Last post: Yesterday at 11:14:31 AM(UTC)
Lansweeper Detecting and Reporting on Programs in Apps & Features
by  LANGuy  
Go to last post Go to first unread
Last post: 10/18/2021 6:09:11 PM(UTC)
Lansweeper OS: Not latest Build of Windows 10 not working
by  jmm25   Go to last post Go to first unread
Last post: 10/18/2021 12:48:41 PM(UTC)
Lansweeper AD DistinguishedName of Computer object
by  elKastr0nom   Go to last post Go to first unread
Last post: 10/14/2021 6:52:50 PM(UTC)
Lansweeper Report if Credential Guard is active
by  ericatbrandmauer  
Go to last post Go to first unread
Last post: 10/14/2021 10:28:15 AM(UTC)