The Samsung Android device must be configured to enforce that Wi-Fi Sharing is disabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-258694 | KNOX-14-225020 | SV-258694r959010_rule | CCI-000366 | medium |
| Description | ||||
| Wi-Fi Sharing is an optional configuration of Wi-Fi Tethering/Mobile Hotspot, which allows the device to share its Wi-Fi connection with other wirelessly connected devices instead of its mobile (cellular) connection. Wi-Fi Sharing grants the "other" device access to a corporate Wi-Fi network and may possibly bypass the network access control mechanisms. This risk can be partially mitigated by requiring the use of a preshared key for personal hotspots. SFR ID: FMT_SMF_EXT.1.1 #47 | ||||
| STIG | Date | |||
| Samsung Android OS 14 with Knox 3.x COPE Security Technical Implementation Guide | 2024-12-06 | |||
Related Frameworks
4 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
CM-6
1.00
- DISA · 2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1712 mappings
3.4.1
1.00
- DISA · 2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.4.2
1.00
- DISA · 2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000366
1.00
- DISA · 2 · disa_xccdf · related
Details
Check Text (C-258694r959010_chk)
Verify requirement KNOX-14-210160 (disallow config tethering) has been implemented.
If "Disallow config tethering" has not been implemented, this is a finding.
Fix Text (F-62343r931281_fix)
Implement "Disallow config tethering" (refer to requirement KNOX-14-210160).