Run an Audit of All Vulnerable Dell SupportAssist Installations on Your Network
Find all computers in your network that are vulnerable to the Remote Code Execution vulnerability in the Dell Supportassist Software.
Dell revealed in its security advisory that versions below 3.2.0.90 are vulnerable to CVE-2019-3719. The audit below shows assets that have Dell SupportAssist installed and whether the version is lower than the recommended software version. The audit can also be adjusted for future use to report on newer versions of the Dell SupportAssist software. You can find more information in our blog post.
Dell SupportAssist Vulnerability Query
Select Distinct Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblAssets.Username,
tblAssets.Userdomain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.SP,
tblAssets.Lastseen,
tblAssets.Lasttried,
tblSoftwareUni.softwareName As Software,
tblSoftware.softwareVersion As Version,
tblSoftwareUni.SoftwarePublisher As Publisher,
Case
When tblSoftwareUni.softwareName Like '%SupportAssist' And
tblSoftware.softwareVersion < '3.2.0.90' Then 'Vulnerable'
Else 'Safe'
End As Vulnerablity,
tblSoftware.Lastchanged,
Case
When tblSoftwareUni.softwareName Like '%SupportAssist' And
tblSoftware.softwareVersion < '3.2.0.90' Then '#ffadad'
Else '#d4f4be'
End As backgroundcolor
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblSoftwareUni.softwareName Like '%SupportAssist' And
tblState.Statename = 'Active'
Order By tblAssets.IPAddress Desc
