Detections
Analytics
2.1 Host must run software that has not reached End of General Support status
Information
The "End of General Support" (EOGS) status indicates that the software version has exceeded its primary support lifecycle, during which VMware provides new security patches, bug fixes, and technical assistance. When a product reaches this status, VMware no longer releases security updates for that version for customers outside of an extended support contract. Thus, systems still running software past its EOGS are potentially exposed to unpatched vulnerabilities and other security risks.Running software beyond its EOGS can compromise the integrity, availability, and confidentiality of virtual environments. Keeping VMware ESXi software versions within the support period ensures that organizations have access to the latest security patches, critical updates, and vendor support.
NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
Solution
To remediate this recommendation, upgrade the host to an ESXi release/build that is still within Broadcom General Support. Use vSphere Lifecycle Manager or the vendor-supported image, validate hardware compatibility first, place the host in maintenance mode, remediate/upgrade, reboot, and verify the new build.Impact:
Failing to update and maintain software versions within the support period can lead to potential security breaches, data losses, and reduced operational efficiency, as the software might become incompatible with newer technologies and lack support for emerging security threats.
See Also
Item Details
Audit Name: CIS VMware ESXi 9.0 v1.0.0 L1 Unix
Category: SYSTEM AND SERVICES ACQUISITION
References: 800-53|SA-22, CSCv7|2.2
Plugin: Unix
Control ID: 1f98fb9e3aa2daf2b61c480e1b7c897eb743aa34d750176e30e68afaa876ee3e