Intel RAID Web Console 3 Vulnerability Audit
Security Software VulnerabilityDiscover All Computers Vulnerable to the Intel RAID Web Console 3 Vulnerability CVE-2019-11119
Intel released information a new vulnerability in its RAID web console 3 software. Intel-SA-00259, their own internal classification, details exactly what causes the vulnerability along with the CVE code CVE-2019-11119.
The most important thing is that your RAID web console is running version 7.009.011.000 or higher, which is exactly what the audit checks for. All you need to do is run the audit below and patch any servers that are running outdated web console versions.
Intel RAID Web Console 3 Vulnerability Query
Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblAssets.Username,
tblAssets.Userdomain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tblSoftwareUni.softwareName As Software,
tblSoftware.softwareVersion As Version,
tblSoftwareUni.SoftwarePublisher As Publisher,
Case
When Convert(bigint,Replace(tblSoftware.softwareVersion, '.', '')) >=
7009011000 Then 'Up to date'
Else 'Out of date'
End As [Patch Status],
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.SP,
tblAssets.Lastseen,
tblAssets.Lasttried,
tblSoftware.Lastchanged,
Case
When Convert(bigint,Replace(tblSoftware.softwareVersion, '.', '')) >=
7009011000 Then '#d4f4be'
Else '#ffadad'
End As backgroundcolor
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblSoftwareUni.softwareName = 'RAID Web Console 3' And
tblState.Statename = 'Active'