An update rollup is available for Windows Embedded Compact 2013. This rollup resolves the security issues that are described in the following article:
Before you install this update, the default value of the AllowEncryptionOracle registry key is 2 (Vulnerable) (see KB 4457498 for more information). After you install this update, the default value is changed from Vulnerable to Mitigated. These changes will require a restart of the affected systems. By default, after this update is installed, patched clients can't communicate with unpatched servers.