STIGQter: STIG Summary: Google Android 15 COBO Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 13 May 2026:

Google Android 15 must be configured to enable authentication of personal hotspot connections to the device using a preshared key.

DISA Rule

SV-267447r1033115_rule

Vulnerability Number

V-267447

Group Title

PP-MDF-333260

Rule Version

GOOG-15-008700

Severity

CAT II

CCI(s)

CCI-001443 - Protect wireless access to the system using authentication of users and/or devices.
CCI-002314 - Employ automated mechanisms to control remote access methods.

Weight

Fix Recommendation

This is a User-Based Enforcement (UBE) control.

Train users to not change the default Wi-Fi hotspot security setting: 15-character complex Wi-Fi hotspot preshared key (password) ("WPA2/WPA3-Personal" or WPA3-Personal"). (GOOG-15-009800).

If the required preshared key is not set up, train users to use the following procedure to set up the required setting:

1. Go to Settings >> Network & Internet >> Hotspot & tethering.
2. Enable "Wi-Fi hotspot".
3. Tap on the words to the left of the slide called "Wi-Fi Hotspot" to show the configuration options.
4. Click the "Security" link and select “WPA2/WPA3-Personal” or "WPA3-Personal".

Check Contents

This is a User-Based Enforcement (UBE) control.

Check a sample of Pixel phones at the site and verify the Wi-Fi hotspot preshared key (password) is set to "WPA2/WPA3-Personal" or "WPA3-Personal".

1. Go to Settings >> Network & Internet >> Hotspot & tethering.
2. Enable "Wi-Fi hotspot".
3. Tap on the words to the left of the slide called "Wi-Fi Hotspot" to show the configuration options.
4. Click the "Security" link and verify either “WPA2/WPA3-Personal” or "WPA3-Personal" is selected.

If the Wi-Fi hotspot security is not set to “WPA2/WPA3-Personal” or "WPA3-Personal", this is a finding.

Vulnerability Number

V-267447

Documentable

False

Rule Version

GOOG-15-008700

Severity Override Guidance

Check Content Reference

Target Key

5653