Check: KNOX-14-210140
Samsung Android OS 14 with Knox 3.x COPE STIG:
KNOX-14-210140
(in versions v1 r2 through v1 r1)
Title
Samsung Android must be configured to disable USB mass storage mode. (Cat II impact)
Discussion
USB mass storage mode enables the transfer of data and software from one device to another. This software can include malware. When USB mass storage is enabled on a mobile device, it becomes a potential vector for malware and unauthorized data exfiltration. Prohibiting USB mass storage mode mitigates this risk. SFR ID: FMT_SMF_EXT.1.1 #39
Check Content
Review the configuration to determine if the Samsung Android devices are disabling USB mass storage mode. This validation procedure is performed on both the management tool and the Samsung Android device. On the management tool, in the device restrictions, verify "USB file transfer" has been set to "Disallow". On the Samsung Android device, from the "USB for file transfer" notification, verify that a "File Transfer" is not an option. If on the management tool "USB file transfer" is not set to "Disallow", or on the Samsung Android device a "File Transfer" is an option, this is a finding.
Fix Text
Configure the Samsung Android devices to disable USB mass storage mode. On the management tool, in the device restrictions, set "USB file transfer" to "Disallow". DeX drag and drop file transfer capabilities will be prohibited, but all other DeX capabilities remain usable.
Additional Identifiers
Rule ID: SV-258675r931225_rule
Vulnerability ID: V-258675
Group Title: PP-MDF-333230
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-002546 |
The organization physically disables or removes organization-defined connection ports or input/output devices on organization-defined information systems or information system components. |
Controls
Number | Title |
---|---|
SC-41 |
Port And I/O Device Access |