credssp encryption oracle remediation registry fix

In the event that it is not possible to intervene on the server, it is possible to resolve in another way, by deactivating the protected CredSSP mode on the client and thus forcing the authentication in unsafe ( vulnerable) mode. The most streamlined and secure way to get rid of the error and to be able to connect via RDP is to ensure that both the client and the server have installed the update: this is by far the safest solution, as it solves the problem while keeping all the security protocols enabled. KB4103723 for Build 1609 and Windows Server 2016Īdditional info on the vulnerability are available at this link: 201.To fix the issue the following updates have been recently released by Microsoft:

Any application that depends on CredSSP for authentication may be vulnerable to this type of attack. In vulnerable versions of CredSSP there is a problem, identified recently, that allows remote code execution: an attacker who exploits this vulnerability can forward user credentials to execute code on the target system. Understanding CredSSPĬredSSP stands for Credential Security Support Provider protocol and is an authentication provider that processes authentication requests for other applications. This post is dedicated to understanding the causes of this error and the various possibilities of solution. This could be due to CredSSP encryption oracle remediation. Unfortunately this has caused for a large number of users the appearance of the following error when making a remote connection via RDP:Īn authentication error has occurred. Among these, new security rules have been introduced on some CredSSP protocol vulnerabilities in the RDP authentication phase, better known as Terminal Desktop or Remote Desktop.

The recent Windows 10 updates released in May 2018 have introduced some improvements to the security of some protocols, eliminating problems related to known vulnerabilities.

Credssp encryption oracle remediation registry fix