Intel RAID Web Console 3 Vulnerability Audit

Discover All Computers Vulnerable to the Intel RAID Web Console 3 Vulnerability CVE-2019-11119

Intel released information a new vulnerability in its RAID web console 3 software. Intel-SA-00259, their own internal classification, details exactly what causes the vulnerability along with the CVE code CVE-2019-11119.

The most important thing is that your RAID web console is running version 7.009.011.000 or higher, which is exactly what the audit checks for. All you need to do is run the audit below and patch any servers that are running outdated web console versions.

Intel RAID Web Console 3 Vulnerability Query

Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tsysAssetTypes.AssetTypename As AssetType,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  tblSoftwareUni.softwareName As Software,
  tblSoftware.softwareVersion As Version,
  tblSoftwareUni.SoftwarePublisher As Publisher,
  Case
    When Convert(bigint,Replace(tblSoftware.softwareVersion, '.', '')) >=
      7009011000 Then 'Up to date'
    Else 'Out of date'
  End As [Patch Status],
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tsysOS.OSname As OS,
  tblAssets.SP,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  tblSoftware.Lastchanged,
  Case
    When Convert(bigint,Replace(tblSoftware.softwareVersion, '.', '')) >=
      7009011000 Then '#d4f4be'
    Else '#ffadad'
  End As backgroundcolor
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
  Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
  Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblSoftwareUni.softwareName = 'RAID Web Console 3' And
  tblState.Statename = 'Active'

Show

Hide