Title

The Operating System must be current and at the latest release level. (Cat II impact)

Discussion

Failure to install the most current Operating System (OS) updates leaves a system vulnerable to exploitation. Current OS updates and patches correct known security and system vulnerabilities. If an OS is not at a supported level this will be upgraded to a Category I finding.

Check Content

Open a terminal session and enter one of the following commands. sudo softwareupdate --list OR sudo softwareupdate --list --all Review the results and verify the system is at the current release level. If not, this is a finding.

Fix Text

Install the current OS updates and patches.

Additional Identifiers

Rule ID: SV-38569r1_rule

Vulnerability ID: V-25374

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.