Site Overlay

SMB Signing Disabled

To terminate SMB signing disabled on windows servers with PowerShell command, run the following command with Run'as.

set-SmbServerConfiguration -RequireSecuritySignature $TRUE -force

SOURCE:

https://techcommunity.microsoft.com/t5/storage-at-microsoft/configure-smb-signing-with-confidence/ba-p/2418102

The following steps are to terminate the vulnerability manually via regedit.

image 7
SMB signing disabled
image 8

The following steps are to test whether the vulnerability has been terminated. This process requires KALI in your environment.

nmap --script smb-security-mode 10.196.1.0 -p 137,139,445
image 9
The appearance in which the vulnerability is active
image 10
Terminated view of vulnerability