The TFTP Client must not be installed on the system.

STIG ID: WN10-00-000120  |  SRG: SRG-OS-000096-GPOS-00050 | Severity: medium |  CCI: CCI-000382

Vulnerability Discussion

Some protocols and services do not support required security features, such as encrypting passwords or traffic.

Check

The "TFTP Client" is not installed by default. Verify it has not been installed.

Navigate to the Windows\System32 directory.

If the "TFTP" application exists, this is a finding.

Fix

Uninstall "TFTP Client" from the system.

Run "Programs and Features".
Select "Turn Windows Features on or off".

De-select "TFTP Client".