Title

Windows operating systems that are no longer supported by the vendor for security updates must not be installed on a system. (Cat I impact)

Discussion

Windows operating systems that are no longer supported by Microsoft for security updates are not evaluated or updated for vulnerabilities leaving them open to potential attack. Organizations must upgrade to a supported operating system to ensure continued support.

Check Content

Microsoft support for Windows Vista ended 11 April 2017. If Windows Vista is installed on a system, this is a finding.

Fix Text

Upgrade Windows Vista systems to a supported operating system.

Additional Identifiers

Rule ID: SV-85299r2_rule

Vulnerability ID: V-4107

Group Title: Unsupported Windows OS

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.