STIGQter: STIG Summary: Honeywell Android 13 COPE Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 22 Apr 2025:

Honeywell Android 13 must be configured to enable authentication of personal hotspot connections to the device using a preshared key.

DISA Rule

SV-274402r1100776_rule

Vulnerability Number

V-274402

Group Title

PP-MDF-333260

Rule Version

HONW-13-008700

Severity

CAT II

CCI(s)

CCI-001443 - Protect wireless access to the system using authentication of users and/or devices.
CCI-002314 - Employ automated mechanisms to control remote access methods.

Weight

Fix Recommendation

This is a UBE control.

Train users to not change the default Wi-Fi hotspot security setting: 15-character complex Wi-Fi hotspot preshared key (password) ("WPA2/WPA3-Personal" or WPA3-Personal"). (Refer to HONW-13-009800.)

If the required preshared key is not set up, train users to use the following procedure to set up the required setting:

1. Go to Settings >> Network & Internet >> Hotspot & tethering.
2. Enable "Wi-Fi hotspot".
3. On the left of the slide, tap on "Wi-Fi Hotspot" to bring up the configuration options.
4. Click on the "Security" link and select either "WPA2/WPA3-Personal" or "WPA3-Personal".

Check Contents

This is a User-Based Enforcement (UBE) control.

Check a sample of Honeywell phones at the site and verify that the Wi-Fi hotspot preshared key (password) is set to "WPA2/WPA3-Personal" or "WPA3-Personal".

1. Go to Settings >> Network & Internet >> Hotspot & tethering.
2. Enable "Wi-Fi hotspot".
3. On the left of the slide, tap on "Wi-Fi Hotspot" to bring up the configuration options.
4. Click on the "Security" link and verify that either "WPA2/WPA3-Personal" or "WPA3-Personal" is selected.

If the Wi-Fi hotspot security is not set to "WPA2/WPA3-Personal" or "WPA3-Personal", this is a finding.

Vulnerability Number

V-274402

Documentable

False

Rule Version

HONW-13-008700

Severity Override Guidance

Check Content Reference

Target Key

5702