Title

VMware ESX operating systems that are no longer supported by the vendor for security updates must not be installed on a system. (Cat I impact)

Discussion

VMware ESX operating systems, virtual machines, and associated management software that are no longer supported by VMware for security updates are not evaluated or updated for vulnerabilities leaving them open to potential attack. Organizations must transition to a supported ESXi operating system, virtual machines, and associated management software to ensure continued support.

Check Content

VMware support for ESX versions 3 and 4 ended 21 May 2016. If ESX version 3 or 4 is installed on a system, this is a finding.

Fix Text

Upgrade ESX version 3 and 4 systems to supported versions.

Additional Identifiers

Rule ID: SV-83301r1_rule

Vulnerability ID: V-68723

Group Title: VMware ESX 3 and 4 Unsupported

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.