Security update add-on for Remote Desktop Services Remote Code Execution Vulnerability-CVE-2019-0708

- Do not power off your system during windows update or QFE installation.
- Updating the latest WDA on the client side is recommended before deploying Security Updates through WDM and WMS.
- Latest SSU (KB4490628) must be deployed before deploying CVE-2019-0708 KB's.
- This update can be downloaded from Microsoft Update Catalog website.
- One or more of the monthly rollups released between April 10, 2018 (KB4093118) and March 12, 2019 (KB4489878) must be installed before installing April 2019 and later updates.
- As part of CVE-2019-0708, you must install AMD64-all-windows6.1-kb4499164-x64.msu before installing AMD64-all-windows6.1-kb4499175-x64.msu.

Installing the package using Wyse Device Manager(WDM)
1. Download the package.
2. Open the Package Registration Utility dialog box.
3. Click the EXE tile displayed on the WDM Package Registration Utility dialog box.
4. Browse the exe, msi, msu, or bat files only or the package.
5. Configure the options.
6. Click Upload.
7. Edit the package script AMD64-all-windows6.1-kb4499164-x64 with the below details after the EX command:
- RB
- DT C:\TEMP
- RB
- DT C:\TEMP
8. Schedule the package to the target client
The directory C:\Temp is not deleted. You must edit the .rsp manually with the delete command to delete the directory.
For example, DT C:\Temp.
Lock screen is disabled when you push the package from WDM.

Installing the package using Wyse Device Manager(WDM)
1. Log in to WMS Server and download .msu file to your system.
2. Add the .msu file to the repository.
3. Log in to WMS.
4. Click Portal Administration and select Local Repository.
5. Click Sync Files and go to Apps & Data.
6. To create a group in the Wyse Management Suite server, click Groups.
7. Click the Plus sign (+) button and register your client in the same group.
8. Click the Apps and Data option and click OS Image Policies.
9. Click Add Policy and update the required details.
10. To create a policy, go to Apps & Data, and click OS Image policies.
11. Click Add policy and configure the options.
12. Click Save.
13. Select the registered device and go to More actions.
14. Click Update WES image.
15. Enter the description and select the desired option, and then click the Preview button.
16. Click the Schedule button in Image Update job window.
17. Click Update Now at the client side.
18. Go to Job status and monitor Job.
19. After Image Update, Job status is displayed as Completed.