Detections
Analytics
WN25-00-000480 - Windows Server 2025 must be maintained at a supported servicing level.
Information
Systems at unsupported servicing levels will not receive security updates for new vulnerabilities, which leave them subject to exploitation. Systems must be maintained at a servicing level supported by the vendor with new security updates.The Long-Term Servicing Channel (LTSC) remains the standard support branch for Enterprise server platforms. The guidance in this rule assumes usage via this support channel.
Solution
Determine if the end-of-support date for the system's OS build (e.g., build 26100.xxxx) is a past date.If the end-of-support date for the system's OS build is in the past, perform an update to an OS build with a future end-of-support date.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2025_V1R4_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2025 STIG v1r4
Category: SYSTEM AND SERVICES ACQUISITION
References: 800-53|SA-22a., CAT|II, CCI|CCI-003376, Rule-ID|SV-289259r1270884_rule, STIG-ID|WN25-00-000480, Vuln-ID|V-289259
Plugin: Windows
Control ID: 99dc2b8f20a29229a0b009371f00186d22b91c1527a8c0e4154f57c70ebeb40e