Exchange must have the most current, approved service pack installed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-228411	EX16-MB-000680	SV-228411r879827_rule		Medium

Description

Failure to install the most current Exchange service pack leaves a system vulnerable to exploitation. Current service packs correct known security and system vulnerabilities.

STIG	Date
Microsoft Exchange 2016 Mailbox Server Security Technical Implementation Guide	2023-12-18

Details

Check Text (C-30644r497029_chk)

Determine the most current, approved service pack.

Open the Exchange Management Shell and enter the following command:

Get-ExchangeServer | fl Name, AdminDisplayVersion

If the value of "AdminDisplayVersion" does not return the most current, approved service pack, this is a finding.

Fix Text (F-30629r497030_fix)

Install the most current, approved service pack.