Samsung Android must be configured to disable USB mass storage mode.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-276654 | KNOX-16-007200 | SV-276654r1139484_rule | CCI-002546 | medium |
| Description | ||||
| USB mass storage mode enables the transfer of data and software from one device to another. This software can include malware. When USB mass storage is enabled on a mobile device, it becomes a potential vector for malware and unauthorized data exfiltration. Prohibiting USB mass storage mode mitigates this risk. SFR ID: FMT_SMF.1.1 #39 | ||||
| STIG | Date | |||
| Samsung Android 16 COPE Security Technical Implementation Guide | 2026-05-27 | |||
Related Frameworks
1 mapping across 3 frameworks
Related Frameworks
SCF0 mappings
No source states a mapping between these directly.
Also reachable in 3 hops (1) derived by us, not asserted by any source
Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.
- DISA STIG Benchmark (XCCDF)V1R3intersects(normalised)
- DISA CCI List2025-01-23equal to(normalised)
- SCF Secure Traceability Relationship Mapping (STRM)2026.2equal to
NIST 800-530 mappings
No source states a mapping between these directly.
Also reachable in 2 hops (1) derived by us, not asserted by any source
Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.
- DISA STIG Benchmark (XCCDF)V1R3intersects(normalised)
- DISA CCI List2025-01-23equal to(normalised)
CCI1 mapping
CCI-002546
1.00
- DISA STIG Benchmark (XCCDF)V1R3intersects(normalised)
Details
Check Text (C-276654r1139484_chk)
Review the configuration to determine if the Samsung Android devices are disabling USB mass storage mode.
This validation procedure is performed on both the management tool and the Samsung Android device.
On the management tool, in the device restrictions, verify "USB file transfer" has been set to "Disallow".
On the Samsung Android device, from the "USB for file transfer" notification, verify that a "File Transfer" is not an option.
If on the management tool "USB file transfer" is not set to "Disallow", or on the Samsung Android device a "File Transfer" is an option, this is a finding.
Fix Text (F-80714r1139483_fix)
Configure the Samsung Android devices to disable USB mass storage mode.
On the management tool, in the device restrictions, set "USB file transfer" to "Disallow".
DeX drag and drop file transfer capabilities will be prohibited, but all other DeX capabilities remain usable.
API: addUserRestriction, DISALLOW_USB_FILE_TRANSFER