Title

The macOS system must be a version supported by the vendor. (Cat I impact)

Discussion

Unsupported software and systems should not be used because fixes to newly identified bugs will not be implemented by the vendor. The lack of support can result in potential vulnerabilities. Software and systems at unsupported servicing levels or releases will not receive security updates for new vulnerabilities, which leaves them subject to exploitation. When maintenance updates and patches are no longer available, software is no longer considered supported and should be upgraded or decommissioned.

Check Content

Verify the operating system version. Click the Apple icon on the menu at the top left corner of the screen. Select the "About This Mac" option. If the operating system version is no longer supported by the vendor, this is a finding.

Fix Text

Upgrade to a supported version of the operating system.

Additional Identifiers

Rule ID: SV-278915r1149198_rule

Vulnerability ID: V-278915

Group Title: SRG-OS-000830-GPOS-00300

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.