Title

Systems must be maintained at a supported OS or service pack level. (Cat I impact)

Discussion

Systems at unsupported service packs or releases will not receive security updates for new vulnerabilities, which leave them subject to exploitation. Systems must be maintained at a service pack level supported by the vendor with new security updates.

Check Content

Run "winver.exe". If the "About Windows" displays the following or less, this is a finding: "Microsoft Windows Server Version 6.3 (Build 9600)" Windows Server 2012 and 2012 R2 support ended on October 10, 2023. If Extended Security Updates (ESUs up to three years) have not been acquired, this is a finding.

Fix Text

Update the system to a supported release or operating system.

Additional Identifiers

Rule ID: SV-225417r921961_rule

Vulnerability ID: V-225417

Group Title: SRG-OS-000191-GPOS-00080

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.