Nvidia August 2019 Security Audit

Discover Vulnerable NVIDIA Drivers on Your Network

List all assets which are vulnerable to the Nvidia GPU display driver vulnerabilities disclosed in the August security bulletin. Assets with outdated drivers will be vulnerable to five security issues, CVE-2019-5683, CVE-2019-5684, CVE-2019-5685, CVE-2019-5686, CVE-2019-5687.

The audit below provides an overview of all assets with an Nvidia GPU and whether they are vulnerable or not. More info about these vulnerabilities can be found in our Nvidia vulnerability blog post.

Nvidia August Security Audit

Nvidia GPU Display Driver Vulnerability Query

Select Distinct Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblAssets.Username,
  tblAssets.Userdomain,
  Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon,
  tblAssets.IPAddress,
  tblVideoController.Caption,
  tblVideoController.DriverVersion,
  Case
    When (tblVideoController.Caption Like '%geforce%' And
      NvidiaAssets.DriverVersion Between 2621143000 And 2621143159) Or
      ((tblVideoController.Caption Like '%Quadro%' Or
      tblVideoController.Caption Like '%NVS%') And
      NvidiaAssets.DriverVersion Between 2621143000 And 2621143169) Or
      ((tblVideoController.Caption Like '%Quadro%' Or
      tblVideoController.Caption Like '%NVS%') And
      NvidiaAssets.DriverVersion Between 2521141800 And 2521142599) Or
      ((tblVideoController.Caption Like '%Quadro%' Or
      tblVideoController.Caption Like '%NVS%') And
      NvidiaAssets.DriverVersion Between 2321139065 And 2321139255) Then
      'Vulnerable'
    Else 'Safe'
  End As [Vulnerable/Safe],
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tsysOS.OSname As OS,
  tblAssets.SP,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  Case
    When (tblVideoController.Caption Like '%geforce%' And
      NvidiaAssets.DriverVersion Between 2621143000 And 2621143159) Or
      ((tblVideoController.Caption Like '%Quadro%' Or
      tblVideoController.Caption Like '%NVS%') And
      NvidiaAssets.DriverVersion Between 2621143000 And 2621143169) Or
      ((tblVideoController.Caption Like '%Quadro%' Or
      tblVideoController.Caption Like '%NVS%') And
      NvidiaAssets.DriverVersion Between 2521141800 And 2521142599) Or
      ((tblVideoController.Caption Like '%Quadro%' Or
      tblVideoController.Caption Like '%NVS%') And
      NvidiaAssets.DriverVersion Between 2321139065 And 2321139255) Then
      '#ffadad'
    Else '#d4f4be'
  End As backgroundcolor
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
  Inner Join tblVideoController On
    tblAssets.AssetID = tblVideoController.AssetID
  Left Join (Select Top 1000000 tblAssets.AssetID,
        Convert(bigint,Replace(tblVideoController.DriverVersion, '.',
        '')) As DriverVersion,
        tblVideoController.Caption
      From tblAssets
        Inner Join tblVideoController On tblAssets.AssetID =
          tblVideoController.AssetID
      Where tblVideoController.Caption Like '%Nvidia%') As NvidiaAssets On
    NvidiaAssets.AssetID = tblAssets.AssetID
Where (tblVideoController.Caption Like '%geforce%' Or
    tblVideoController.Caption Like '%quadro%' Or
    tblVideoController.Caption Like '%NVS%' Or tblVideoController.Caption Like
    '%tesla%') And tblVideoController.DriverVersion Is Not Null And
  tblAssetCustom.State = 1
Order By tblAssets.Domain,
  tblAssets.AssetName

Audit and Take Action in 3 Easy Steps

Download-Install-Lansweeper

1. Download & Install Lansweeper

Save-and-Run-the-Report

3. Run the Audit & Take Action

Download Lansweeper to Run this Audit

Harness the Power of Reporting