Remediation

The recommended way to remediate the vulnerability is to upgrade to Snow Inventory Agent for Windows version 6.7.1 or later. Flexera recommends that customers always install the latest version.

If upgrading is not an option, the CPUID setting must be disabled. There are two alternative ways of disabling the setting, as described below.

note

There is a known issue in Snow Inventory Agent for Windows version 6.7.0 and earlier, possibly causing incorrect processor and core count for virtual machines in some scenarios.

Use Snow Inventory Server Admin Console to deploy a configuration update for Snow Inventory Agent for Windows

The following procedure must be repeated for all configurations that are used by agents running on Windows.

1. On your Snow Inventory Server application server, open Snow Inventory Server Admin Console and sign in.

2. In the left-hand view, select Configurations.

   

3. Select an existing configuration that affects your Windows computers.

4. Select Edit.

   

   The Edit configuration window appears.

5. Select System settings.

   

6. Verify whether the key Hardware_Scan_Enable_Cpuid exists:

   • If it exists: select the line, select Edit, and ensure the check box is clear, select Update.

   • If it does not exist: select Add, select Hardware_Scan_Enable_Cpuid, and ensure the check box is clear, select Add.

   

   

7. Select Save.

   A window appears with a Yes/No question. Answer Yes to save the configuration.

   

8. In the left-hand view, select Agent Updates.

   This view displays different metrics for an agent update, for example, the progress and how many machines have successfully been updated.

   In the left-hand view, you can select your agent update to see its update progress:

   

   

   

   The last view displays statistics for successful agent updates.

The progress of a configuration deployment depends on client availability (for example, that a computer is powered-on) and the http.poll_interval value in the Snow Inventory Agent for Windows configuration file.

Change an existing Snow Inventory Agent for Windows configuration file

Using the tool of your choice, change the snowagent.config file on all computers that run Snow Inventory Agent for Windows:

1. Edit %ProgramFiles%\Snow Software\Inventory\Agent\snowagent.config.

2. Find the <SystemSettings> section.

3. Find the the line that contains hardware.scan.enable_cpuid and make sure that it is <Setting key="hardware.scan.enable_cpuid" value="false" />.

   note

   If the <Setting key="hardware.scan.enable_cpuid" value="false" /> line does not exist, create it in the <SystemSettings> section.

4. Save and close the file.

5. Restart the Windows service named Snow Inventory Agent.