Identifying systems for INTEL-SA-00166

[Bart_van_den_Bo]

Hi,

Would it somehow be possible to identify systems applicable to Intel's recent Security Advisory INTEL-SA-00166?
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00166.html

Thanks,
Bart

[Esben_D · Accepted solution]

Theoretically, yes. However, the big issue is figuring out Intel's weird versioning.

In Lansweeper you can find all of your Intel video drivers with the report below. However in the link you provided I don't see which generations of CPU's are effected, while their driver version numbering seems to be very different based on CPU generation.

In my test environment, none of my driver version align with the ones mentioned by Intel, so I can't really help on that front.

Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tsysAssetTypes.AssetTypename,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  tblVideoController.Caption,
  tblVideoController.DriverVersion
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tblVideoController On
    tblAssets.AssetID = tblVideoController.AssetID
Where tblVideoController.Caption Like '%intel%' And tblAssetCustom.State = 1
Order By tblVideoController.DriverVersion

[Bart_van_den_Bo]

Esben.D wrote:
Theoretically, yes. However, the big issue is figuring out Intel's weird versioning...

Thanks, this does help me though as with the remark in Intel's article "Affected Products:
Intel® Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058)." combined with your report i do find some (only 3) of the affected systems in my environment:

20.19.15.4835
20.19.15.4835
20.19.15.4835
20.19.15.5058
20.19.15.5058
20.19.15.5058
21.20.16.4534
21.20.16.4627
22.20.16.4691
23.20.16.4901
23.20.16.4973
23.20.16.4973
and the list goes on from here...

So kudos to you. this DOES help in my environment