Honeywell Android 13 must be configured to enable authentication of personal hotspot connections to the device using a preshared key.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-274307 | HONW-13-008700 | SV-274307r1100374_rule | CCI-001443 | medium |
| Description | ||||
| If no authentication is required to establish personal hotspot connections, an adversary may be able to use that device to perform attacks on other devices or networks without detection. A sophisticated adversary may also be able to exploit unknown system vulnerabilities to access information and computing resources on the device. Requiring authentication to establish personal hotspot connections mitigates this risk. Application note: If hotspot functionality is permitted, it must be authenticated via a preshared key. There is no requirement to enable hotspot functionality, and it is recommended this functionality be disabled by default. SFR ID: FMT_SMF_EXT.1.1 #41 | ||||
| STIG | Date | |||
| Honeywell Android 13 COBO Security Technical Implementation Guide | 2025-05-07 | |||
Related Frameworks
3 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
AC-18(1)
1.00
- DISA · V1R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1711 mapping
3.1.17
1.00
- DISA · V1R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-001443
1.00
- DISA · V1R1 · disa_xccdf · related
Details
Check Text (C-274307r1100374_chk)
This is a User-Based Enforcement (UBE) control.
Check a sample of Honeywell phones at the site and verify that the Wi-Fi hotspot preshared key (password) is set to "WPA2/WPA3-Personal" or "WPA3-Personal".
1. Go to Settings >> Network & Internet >> Hotspot & tethering.
2. Enable "Wi-Fi hotspot".
3. On the left of the slide, tap on "Wi-Fi Hotspot" to bring up the configuration options.
4. Click on the "Security" link and verify that either "WPA2/WPA3-Personal" or "WPA3-Personal" is selected.
If the Wi-Fi hotspot security is not set to "WPA2/WPA3-Personal" or "WPA3-Personal", this is a finding.
Fix Text (F-78303r1100373_fix)
This is a UBE control.
Train users to not change the default Wi-Fi hotspot security setting: 15-character complex Wi-Fi hotspot preshared key (password) ("WPA2/WPA3-Personal" or WPA3-Personal"). (Refer to HONW-13-009800.)
If the required preshared key is not set up, train users to use the following procedure to set up the required setting:
1. Go to Settings >> Network & Internet >> Hotspot & tethering.
2. Enable "Wi-Fi hotspot".
3. On the left of the slide, tap on "Wi-Fi Hotspot" to bring up the configuration options.
4. Click on the "Security" link and select either "WPA2/WPA3-Personal" or "WPA3-Personal".