Navigate

Check: SRG-APP-000456-UEM-000330

Unified Endpoint Management Server SRG: SRG-APP-000456-UEM-000330 (in versions v2 r3 through v1 r1)

Title

The UEM server must be maintained at a supported version. (Cat I impact)

Discussion

The UEM vendor maintains specific product versions for a specific period of time. MDM/EMM server versions no longer supported by the vendor will not receive security updates for new vulnerabilities, which leaves them subject to exploitation. Satisfies:FPT_TUD_EXT.1.1, FPT_TUD_EXT.1.2 Reference:PP-MDM-414005

Check Content

Verify the UEM server is maintained at a supported version. If the UEM server is not maintained at a supported version, this is a finding.

Fix Text

Configure the UEM server to be maintained at a supported version.

Additional Identifiers

Rule ID: SV-234605r961683_rule

Vulnerability ID: V-234605

Group Title: SRG-APP-000456

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-002605	Install security-relevant software updates within an organization-defined time period of the release of the updates.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
SI-2	Flaw Remediation