STIGQter: STIG Summary: Microsoft Exchange 2016 Mailbox Server Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

Exchange must have the most current, approved service pack installed.

DISA Rule

SV-228411r612748_rule

Vulnerability Number

V-228411

Group Title

SRG-APP-000456

Rule Version

EX16-MB-000680

Severity

CAT II

CCI(s)

• CCI-002605 - The organization installs security-relevant software updates within an organization-defined time period of the release of the updates.

Weight

10

Fix Recommendation

Install the most current, approved service pack.

Check Contents

Determine the most current, approved service pack.

Open the Exchange Management Shell and enter the following command:

Get-ExchangeServer | fl Name, AdminDisplayVersion

If the value of "AdminDisplayVersion" does not return the most current, approved service pack, this is a finding.

Vulnerability Number

V-228411

Documentable

False

Rule Version

EX16-MB-000680

Severity Override Guidance

Determine the most current, approved service pack.

Open the Exchange Management Shell and enter the following command:

Get-ExchangeServer | fl Name, AdminDisplayVersion

If the value of "AdminDisplayVersion" does not return the most current, approved service pack, this is a finding.

Check Content Reference

M

Target Key

4223

Comments