Microsoft Windows Server 2012 R2 Unsupported Version Detection

#
# (C) Tenable Network Security, Inc.
#

include('deprecated_nasl_level.inc');
include("compat.inc");

if (description)
{
  script_id(182966);
  script_version("1.5");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/03/13");

  script_xref(name:"IAVA", value:"0001-A-0651");

  script_name(english:"Microsoft Windows Server 2012 R2 Unsupported Version Detection");

  script_set_attribute(attribute:"synopsis", value:"
The remote operating system is no longer supported.");
  script_set_attribute(attribute:"description", value:
"Microsoft Windows Server 2012 R2 is running on the remote host.
Microsoft ended support for Windows Server 2012 R2 on October 10, 2023.

Lack of support implies that no new security patches for the product
will be released by the vendor. As a result, it is likely to contain
security vulnerabilities. Furthermore, Microsoft is unlikely to
investigate or acknowledge reports of vulnerabilities.");
  # https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2012
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?12113588");
  # https://learn.microsoft.com/en-us/lifecycle/announcements/windows-server-2012-r2-end-of-support
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?14defa88");

  script_set_attribute(attribute:"solution", value:
"Upgrade to a version of Microsoft Windows that is currently supported.");
  script_set_attribute(attribute:"risk_factor", value:"High");

  script_set_attribute(attribute:"plugin_publication_date", value:"2023/10/12");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:microsoft:windows");
  script_set_attribute(attribute:"unsupported_by_vendor", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("smb_reg_service_pack.nasl", "wmi_win_2012_esu_status.nbin");
  script_exclude_keys("SMB/not_windows");
  script_require_ports("SMB/WindowsVersion");

  exit(0);
}

if (get_kb_item("SMB/not_windows")) audit(AUDIT_OS_NOT, "Windows");

var product_name  = "Windows Server 2012 R2";
var tag           = "microsoft:windows_server_2012:r2";
var cpe_ver       = "";

var os = get_kb_item("SMB/WindowsVersion");
var os_name = get_kb_item("SMB/ProductName");
var port = get_kb_item("SMB/transport");

# No OS
if (!os) audit(AUDIT_HOST_NOT, "running an OS known to this plugin");

# Not Windows Server 2012
if ("6.3" >!< os) audit(AUDIT_OS_NOT, "Windows Server 2012 R2");

if(get_kb_item("WMI/2012_ESU")) audit(AUDIT_SUPPORTED, os_name);

var edition = NULL;
# Both x86 and x64 exist in the CPE DB (xml file) from nvd.nist.gov.
var arch = get_kb_item("SMB/ARCH");
if (!isnull(arch) && "x64" >< arch) edition = "x64";
else edition = "x86";

cpe_ver = cpe_ver + ":" + edition;

register_unsupported_product(
  product_name : product_name,
  cpe_class    : CPE_CLASS_OS,
  cpe_base     : tag,
  version      : cpe_ver
);

security_report_v4(port:port, severity:SECURITY_HOLE);