With the latest macOS 11.3 update, Apple fixes a critical vulnerability within their operating system. We advise you to update your Apple installations as soon as possible. The report below will help you with identifying all the Mac machines in your network and whether they are running version 11.3 or higher. With the added color-coding, you’ll be able to easily spot and filter which ones are still out of date and need to be updated first.
MacOS Anti-Malware Zero-Day Vulnerability Query
Select Distinct Top 1000000 Coalesce(tsysOS.Image,
tsysAssetTypes.AssetTypeIcon10) As icon,
tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tblState.Statename As State,
tblAssets.IPAddress,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tblMacOSInfo.SystemVersion,
Case when tblMacOSInfo.SystemVersion LIKE '%11.3%' then 'Safe'
When tblMacOSInfo.SystemVersion LIKE '%11.0%' then 'Vulnerable'
When tblMacOSInfo.SystemVersion LIKE '%11.1%' then 'Vulnerable'
When tblMacOSInfo.SystemVersion LIKE '%11.2%' then 'Vulnerable'
When tblMacOSInfo.SystemVersion LIKE '%10.%' then 'Vulnerable'
else 'Safe' end as [Vulnerable/Safe],
tblAssets.Lastseen,
tblAssets.Lasttried,
Case when tblMacOSInfo.SystemVersion LIKE '%11.3%' then '#d4f4be'
When tblMacOSInfo.SystemVersion LIKE '%10.%' then '#ffadad'
When tblMacOSInfo.SystemVersion LIKE '%11.0%' then '#ffadad'
When tblMacOSInfo.SystemVersion LIKE '%11.1%' then '#ffadad'
When tblMacOSInfo.SystemVersion LIKE '%11.2%' then '#ffadad'
else '#d4f4be' end as backgroundcolor
From tblAssets
Inner Join tblMacOSInfo On tblAssets.AssetID = tblMacOSInfo.AssetID
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Left Join tsysIPLocations On tblAssets.IPNumeric >= tsysIPLocations.StartIP
And tblAssets.IPNumeric <= tsysIPLocations.EndIP
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tblState On tblState.State = tblAssetCustom.State
Where tblAssetCustom.State = 1 And tsysAssetTypes.AssetTypename Like '%Mac%' And tblMacOSInfo.SystemVersion NOT LIKE '%Server%'
Order By tblAssets.Domain,
tblAssets.AssetName
