Title

Systems must be maintained at a supported version of an operating system. (Cat I impact)

Discussion

Systems at unsupported versions or releases of an operating system will not receive security updates for new vulnerabilities, which leaves them subject to exploitation. Systems must be maintained at a version of the operating system supported by the vendor with new security updates.

Check Content

Support for Windows 2008/2008 R2 ended 14 January 2020. After this date, systems must have Windows 2012 or greater installed. Run "winver.exe". If the "About Windows" dialog box does not display: "Microsoft Windows Version 6.3 (Build 9600)" or greater, this is a finding.

Fix Text

Update the system to a version of the operating system supported by the vendor. Support for Windows 2008/2008 R2 ended 14 January 2020. After this date, systems must have Windows 2012 or greater installed.

Additional Identifiers

Rule ID: SV-29338r3_rule

Vulnerability ID: V-1073

Group Title: Unsupported Service Packs

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.