Notification

Icon
Error

Identifying systems for INTEL-SA-00166 - Intel Security Advisory INTEL-SA-00166

Posted: Tuesday, March 19, 2019 7:38:09 AM(UTC)
Bart van den Bosch

Bart van den Bosch

Member Original PosterPosts: 23
1
Like
This issue has been solved! Click here to view the solution
Hi,

Would it somehow be possible to identify systems applicable to Intel's recent Security Advisory INTEL-SA-00166?
https://www.intel.com/co...sory/intel-sa-00166.html

Thanks,
Bart
Esben.D
#1Esben.D Member Administration Posts: 1,733  
posted: 3/21/2019 3:32:36 PM(UTC)
Theoretically, yes. However, the big issue is figuring out Intel's weird versioning.

In Lansweeper you can find all of your Intel video drivers with the report below. However in the link you provided I don't see which generations of CPU's are effected, while their driver version numbering seems to be very different based on CPU generation.

In my test environment, none of my driver version align with the ones mentioned by Intel, so I can't really help on that front.


Code:
Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tsysAssetTypes.AssetTypename,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  tblVideoController.Caption,
  tblVideoController.DriverVersion
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tblVideoController On
    tblAssets.AssetID = tblVideoController.AssetID
Where tblVideoController.Caption Like '%intel%' And tblAssetCustom.State = 1
Order By tblVideoController.DriverVersion
Bart van den Bosch
#2Bart van den Bosch Member Original PosterPosts: 23  
posted: 3/25/2019 6:45:21 AM(UTC)
Originally Posted by: Esben.D Go to Quoted Post
Theoretically, yes. However, the big issue is figuring out Intel's weird versioning...


Thanks, this does help me though as with the remark in Intel's article "Affected Products:
Intel® Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058)."
combined with your report i do find some (only 3) of the affected systems in my environment:

20.19.15.4835
20.19.15.4835
20.19.15.4835

20.19.15.5058
20.19.15.5058
20.19.15.5058
21.20.16.4534
21.20.16.4627
22.20.16.4691
23.20.16.4901
23.20.16.4973
23.20.16.4973
and the list goes on from here...

So kudos to you. Applause this DOES help in my environment

Active Discussions

Lansweeper Facebook user group
by  Esben.D   Go to last post Go to first unread
Last post: Yesterday at 9:10:27 PM(UTC)
Lansweeper TPM Reporting Issue Help
by  Esben.D  
Go to last post Go to first unread
Last post: Yesterday at 9:06:24 PM(UTC)
Lansweeper Mark Asset as 'Retired/Disposed Of' but keep History
by  dshu  
Go to last post Go to first unread
Last post: Yesterday at 3:01:35 PM(UTC)
Lansweeper LSAgent Custom Cloud Relay Destinations
by  n.klug   Go to last post Go to first unread
Last post: Yesterday at 8:46:03 AM(UTC)
Lansweeper Lansweeper Remote Screenshot Folder
by  Matija  
Go to last post Go to first unread
Last post: Yesterday at 7:24:31 AM(UTC)
Lansweeper Office 2016 key scanning
by  CyberCitizen   Go to last post Go to first unread
Last post: Yesterday at 1:15:25 AM(UTC)