Identifying Intel INTEL-SA-00075 vulnerability

[alvaro_veiga]

Hello guys, is there a way to identify with lansweeper compromised firmware versions with the INTEL-SA-00075 vulnerability?

[Bruce_B]

We've had a question regarding this vulnerability by another customer a few months ago. At the time, Intel's advice was to disable a specific service. Since Lansweeper can scan which services are present on a Windows computer, a report on computers that have this service enabled to give you an indication of potentially vulnerable systems. We've added a report below that should list all computers that have the Intel® Management and Security Application Local Management Service (LMS) service installed.Instructions for adding this report to your Lansweeper installation can be found here. If you are interested in building or modifying reports, we do recommend:

• Reviewing some SQL tutorials, as the Lansweeper report builder is a standard SQL editor. If you know SQL, you know how to build Lansweeper reports as well. This seems like a good tutorial.
  
• Making use of our database dictionary, which explains in great detail what each database table and field stores. More information on the dictionary can be found here.

To ensure maximum accuracy for the report, make sure to rescan your assets prior to running it. To ensure services are rescanned, go to Assets\Windows and click Rescan assets in the left-hand pane.

Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  tblServicesUni.Caption,
  tblServicesUni.Name,
  tblServicesUni.Pathname,
  tblServiceState.State,
  tblServiceStartMode.StartMode
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tblServices On tblAssets.AssetID = tblServices.AssetID
  Inner Join tblServicesUni On tblServicesUni.ServiceuniqueID =
    tblServices.ServiceuniqueID
  Inner Join tblServiceState On tblServiceState.StateID = tblServices.StateID
  Inner Join tblServiceStartMode On tblServiceStartMode.StartID =
    tblServices.StartID
Where tblServicesUni.Name Like '%LMS%'
Order By tblAssets.Domain,
  tblAssets.AssetName