Discover Vulnerable HP Support Assistant in Your IT Estate
HP released a new security advisory detailing a vulnerability in their Support Assistant software that is installed by default on all of their devices. HP Support Assistant is used to troubleshoot issues with HP devices, do hardware diagnostic testing, provide detailed hardware information, and check for BIOS and other driver updates. You can read more about this vulnerability in the HP Support Assistant blog post.
The report below provides an overview of all assets where HP Support Assistant has been scanned and the version is lower than 9.11.0.0. If you’re having issues detecting the latest versions with Lansweeper’s software scanning, you can try the alternative file property scanning report.
HP Support Assistant Vulnerability Query
Select distinct Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblAssets.Username,
tblAssets.Userdomain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tblSoftwareUni.softwareName As Software,
tblSoftware.softwareVersion As Version,
Case
When tblSoftwareUni.softwareName Like '%Support Assistant%' Then '9.11.0.0 or higher'
End As [Fixed Version],
tblSoftwareUni.SoftwarePublisher As Publisher,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.SP,
Case
When tblErrors.ErrorText Is Not Null Or
tblErrors.ErrorText != '' Then
'Scanning Error: ' + tsysasseterrortypes.ErrorMsg
Else ''
End As ScanningErrors,
tblAssets.Lastseen,
tblAssets.Lasttried
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID,
Max(tblErrors.Teller) As ErrorID
From tblErrors
Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID =
ScanningError.ID
Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller
Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype =
tblErrors.ErrorType
Where ((tblSoftwareUni.softwareName Like '%Support Assistant%' And
Cast(ParseName(tblSoftware.softwareVersion, 4) As bigint) < 9) Or
(tblSoftwareUni.softwareName Like '%Support Assistant%' And
Cast(ParseName(tblSoftware.softwareVersion, 4) As bigint) = 9 And
Cast(ParseName(tblSoftware.softwareVersion, 3) As bigint) < 11))
