← Back to Network Device Management Security Requirements Guide

V-278996

CAT I (High)

The network device hardware and software must be a version supported by the vendor.

Rule ID

SV-278996r1207746_rule

STIG

Network Device Management Security Requirements Guide

Version

V5R5

CCIs

CCI-003376

Discussion

Unsupported software and systems must not be used because fixes to newly identified bugs will not be implemented by the vendor. The lack of support can result in potential vulnerabilities. Software and systems at unsupported servicing levels or releases will not receive security updates for new vulnerabilities, which leaves them subject to exploitation. When maintenance updates and patches are no longer available, software is no longer considered supported and must be upgraded or decommissioned.

Check Content

Verify that the network device hardware and software are a version supported by the vendor.

If the network device hardware and software are not a version supported by the vendor, this is a finding.

Fix Text

Install or upgrade the network device hardware and software to a version supported by the vendor.