CVE-2020-16898

A vendor fix is available.

• FixedPackage Analyticssick_psirt

  This issue is addressed in the Microsoft update for CVE-2020-16898.

  https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898↗
• MitigationPackage Analyticssick_psirt

  If you find yourself in a situation where an update is not doable. Microsoft advises the following workarounds: <br /> **Disable ICMPv6 RDNSS**: The following workaround may be helpful in your situation. In all cases, Microsoft strongly recommends that you install the updates for this vulnerability as soon as they become available even if you plan to leave this workaround in place: You can check your \*INTERFACENUMBER\* by running this command in a cmd: ```cmd route print ``` You can disable ICMPv6 RDNSS, to prevent attackers from exploiting the vulnerability, with the PowerShell command below. This workaround is only available for Windows 1709 and above. See What's new in Windows Server 1709 for more information. ```powershell netsh int ipv6 set int *INTERFACENUMBER* rabaseddnsconfig=disable ``` **Note:** No reboot is needed after making the change. <br /> You can disable the workaround with the PowerShell command below. ```powershell netsh int ipv6 set int *INTERFACENUMBER* rabaseddnsconfig=enable ``` **Note:** No reboot is needed after disabling the workaround. <br /> Package Analytics has been verified to function without any issue and is compatible with the prescribed Microsoft update. No additional PA patches are necessary.