The TFTP Client must not be installed on the system.

STIG ID: WN11-00-000120  |  SRG: SRG-OS-000096-GPOS-00050 | Severity: medium |  CCI: CCI-000382

Vulnerability Discussion

The "TFTP Client" is not installed by default. Some protocols and services do not support required security features, such as encrypting passwords or traffic.

Check

Verify TFTP Client has not been installed.

Navigate to the Windows\System32 directory.

If the "TFTP" application exists, this is a finding.

Fix

Uninstall "TFTP Client" from the system.

Run "Programs and Features".
Select "Turn Windows Features on or off".
De-select "TFTP Client".