Notification

Icon
Error

Identifying systems for INTEL-SA-00166 - Intel Security Advisory INTEL-SA-00166

Posted: Tuesday, March 19, 2019 7:38:09 AM(UTC)
Bart van den Bosch

Bart van den Bosch

Member Original PosterPosts: 22
1
Like
This issue has been solved! Click here to view the solution
Hi,

Would it somehow be possible to identify systems applicable to Intel's recent Security Advisory INTEL-SA-00166?
https://www.intel.com/co...sory/intel-sa-00166.html

Thanks,
Bart
Esben.D
#1Esben.D Member Administration Posts: 1,551  
posted: 3/21/2019 3:32:36 PM(UTC)
Theoretically, yes. However, the big issue is figuring out Intel's weird versioning.

In Lansweeper you can find all of your Intel video drivers with the report below. However in the link you provided I don't see which generations of CPU's are effected, while their driver version numbering seems to be very different based on CPU generation.

In my test environment, none of my driver version align with the ones mentioned by Intel, so I can't really help on that front.


Code:
Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tsysAssetTypes.AssetTypename,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  tblVideoController.Caption,
  tblVideoController.DriverVersion
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tblVideoController On
    tblAssets.AssetID = tblVideoController.AssetID
Where tblVideoController.Caption Like '%intel%' And tblAssetCustom.State = 1
Order By tblVideoController.DriverVersion
Bart van den Bosch
#2Bart van den Bosch Member Original PosterPosts: 22  
posted: 3/25/2019 6:45:21 AM(UTC)
Originally Posted by: Esben.D Go to Quoted Post
Theoretically, yes. However, the big issue is figuring out Intel's weird versioning...


Thanks, this does help me though as with the remark in Intel's article "Affected Products:
Intel® Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058)."
combined with your report i do find some (only 3) of the affected systems in my environment:

20.19.15.4835
20.19.15.4835
20.19.15.4835

20.19.15.5058
20.19.15.5058
20.19.15.5058
21.20.16.4534
21.20.16.4627
22.20.16.4691
23.20.16.4901
23.20.16.4973
23.20.16.4973
and the list goes on from here...

So kudos to you. Applause this DOES help in my environment

Active Discussions

Lansweeper Import Assets with Documents
by  CyberCitizen   Go to last post Go to first unread
Last post: Today at 5:53:10 AM(UTC)
Lansweeper Run outside of our domain?
by  hitechgreg   Go to last post Go to first unread
Last post: Yesterday at 8:01:12 PM(UTC)
Lansweeper Linux OS/SP Overview on Software tab
by  davis226  
Go to last post Go to first unread
Last post: Yesterday at 4:25:57 PM(UTC)
Lansweeper Scan model for Pi running Ubuntu-MATE
by  cycleheat   Go to last post Go to first unread
Last post: Yesterday at 4:13:58 PM(UTC)
Lansweeper Azure does not scan the whole subscription
by  Susan.A  
Go to last post Go to first unread
Last post: Yesterday at 10:08:06 AM(UTC)
Lansweeper Windows firewall rules
by  Johnny   Go to last post Go to first unread
Last post: 4/21/2019 4:31:15 PM(UTC)
Lansweeper Asset Disk History
by  cwest  
Go to last post Go to first unread
Last post: 4/19/2019 1:57:35 PM(UTC)