The network device must be running an operating system release that is currently supported by the vendor.

Network devices running an unsupported operating system lack current security fixes required to mitigate the risks associated with recent vulnerabilities.

Have the administrator display the operating system version in operation. The operating system must be current, with related IAVMs addressed.

If the device is using an OS that does not meet all IAVMs or is not currently supported by the vendor, this is a finding.

Update the operating system to a supported version that addresses all related IAVMs.