SSL/TLS use of weak RC4(Arcfour) cipher 3389

Question

Hello everyone

Can someone help me with this vulneravility? CVE-2013-2566, CVE-2015-2808
I disabled manually RC4 I share it here

but when the security team re-evaluate it the vulnerability appear again, please someone with this issue?

My OS: Windows server 2016 Data Center

Answer 1

Hello @Williams Padilla ,

Thank you for posting here.

RC4 is not turned off by default for all applications.

From the screenshot you provided, it seems you did not disable the RC4.

We can use the following registry keys and their values to enable and disable RC4.

And then check if it helps when the security team re-evaluate it the vulnerability appear again.

Reference
Microsoft security advisory: Update for disabling RC4
https://support.microsoft.com/en-us/topic/microsoft-security-advisory-update-for-disabling-rc4-479fd6f0-c7b5-0671-975b-c45c3f2c0540

Hope the information above is helpful.

Should you have any question or concern, please fell free to let us know.

Best Regards,
Daisy Zhou