Title

Windows operating systems that are no longer supported by the vendor for security updates must not be installed on a system. (Cat I impact)

Discussion

Windows operating systems that are no longer supported by Microsoft for security updates are not evaluated or updated for vulnerabilities leaving them open to potential attack. Organizations must transition to a supported operating system to ensure continued support.

Check Content

Microsoft support for Windows XP ended 8 April 2014. If Windows XP is installed on a system, this is a finding.

Fix Text

Upgrade Windows XP systems to a supported operating system.

Additional Identifiers

Rule ID: SV-49933r2_rule

Vulnerability ID: V-4107

Group Title: Unsupported Windows OS

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.