Remediation Steps

Follow the steps below to remediate this finding on Windows.

1. Update Win32-OpenSSH to version 9.6 or later.

2. If an update is unavailable, edit sshd_config to disable the affected algorithms:

   Ciphers -chacha20-poly1305@openssh.com
   MACs -hmac-sha2-256-etm@openssh.com,-hmac-sha2-512-etm@openssh.com
   Restart-Service sshd