STIGQter STIGQter: STIG Summary: Samsung Android OS 9 with Knox 3.x COPE Use Case KPE(AE) Deployment Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Apr 2020:

Samsung Android devices must have the latest available Samsung Android operating system installed.

DISA Rule

SV-103911r1_rule

Vulnerability Number

V-93825

Group Title

PP-MDF-991000

Rule Version

KNOX-09-001300

Severity

CAT I

CCI(s)

Weight

10

Fix Recommendation

Install the latest released version of the Samsung Android operating system on all managed Samsung devices.

Note: In most cases, operating system updates are released by the wireless carrier (for example, Sprint, T-Mobile, Verizon Wireless, and ATT).

Check Contents

Review device configuration settings to confirm that the most recently released version of Samsung Android is installed.

This procedure is performed on both the MDM console and the Samsung Android device.

In the MDM management console, review the version of Samsung Android installed on a sample of managed devices. This procedure will vary depending on the MDM product. See the notes below to determine the latest available operating system version.

On the Samsung Android device, to see the installed operating system version:
1. Open Settings.
2. Tap "About phone".
3. Tap "Software information".

On the Samsung Android device, to confirm that the installed operating system is the latest released version:
1. Open Settings.
2. Tap "Software updates".
3. Tap "Check for system updates".
4. Verify that "No update is necessary at this time" is displayed.

If the installed version of the Android operating system on any reviewed Samsung devices is not the latest released by the wireless carrier, this is a finding.

Note: Some wireless carriers list the version of the latest Android operating system release by mobile device model online:
- ATT: https://www.att.com/devicehowto/dsm.html#!/popular/make/Samsung
- T-Mobile: https://support.t-mobile.com/docs/DOC-34510
- Verizon Wireless: https://www.verizonwireless.com/support/software-updates/

Google's Android operating system patch website: https://source.android.com/security/bulletin/
Samsung's Android operating system patch website: https://security.samsungmobile.com/securityUpdate.smsb

Vulnerability Number

V-93825

Documentable

False

Rule Version

KNOX-09-001300

Severity Override Guidance

Review device configuration settings to confirm that the most recently released version of Samsung Android is installed.

This procedure is performed on both the MDM console and the Samsung Android device.

In the MDM management console, review the version of Samsung Android installed on a sample of managed devices. This procedure will vary depending on the MDM product. See the notes below to determine the latest available operating system version.

On the Samsung Android device, to see the installed operating system version:
1. Open Settings.
2. Tap "About phone".
3. Tap "Software information".

On the Samsung Android device, to confirm that the installed operating system is the latest released version:
1. Open Settings.
2. Tap "Software updates".
3. Tap "Check for system updates".
4. Verify that "No update is necessary at this time" is displayed.

If the installed version of the Android operating system on any reviewed Samsung devices is not the latest released by the wireless carrier, this is a finding.

Note: Some wireless carriers list the version of the latest Android operating system release by mobile device model online:
- ATT: https://www.att.com/devicehowto/dsm.html#!/popular/make/Samsung
- T-Mobile: https://support.t-mobile.com/docs/DOC-34510
- Verizon Wireless: https://www.verizonwireless.com/support/software-updates/

Google's Android operating system patch website: https://source.android.com/security/bulletin/
Samsung's Android operating system patch website: https://security.samsungmobile.com/securityUpdate.smsb

Check Content Reference

M

Target Key

3507

Comments