Title

Systems must be maintained at a supported OS or service pack level. (Cat I impact)

Discussion

Systems at unsupported service packs or releases will not receive security updates for new vulnerabilities, which leave them subject to exploitation. Systems must be maintained at a service pack level supported by the vendor with new security updates.

Check Content

Run "winver.exe". If the "About Windows" displays "Microsoft Windows Server Version 6.3 (Build 9600)" or less, this is a finding. Windows Server 2012 and 2012 R2 support ended on October 10, 2023. If Extended Security Updates (ESUs up to three years) have not been acquired, this is a finding.

Fix Text

Update the system to a supported release or operating system.

Additional Identifiers

Rule ID: SV-226237r921967_rule

Vulnerability ID: V-226237

Group Title: SRG-OS-000191-GPOS-00080

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.