STIGQter: STIG Summary: Samsung Android 16 COBO Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 13 May 2026:

Samsung Android must be configured to enable authentication of personal hotspot connections to the device using a preshared key.

DISA Rule

SV-276539r1139139_rule

Vulnerability Number

V-276539

Group Title

PP-MDF-333260

Rule Version

KNOX-16-007700

Severity

CAT II

CCI(s)

CCI-001443 - Protect wireless access to the system using authentication of users and/or devices.
CCI-002314 - Employ automated mechanisms to control remote access methods.

Weight

Fix Recommendation

This is a "User-Based Enforcement (UBE)" control.

Train users to not change the default Wi-Fi hotspot security setting: 15-character complex Wi-Fi hotspot preshared key (password) ("WPA2/WPA3-Personal" or WPA3-Personal"). (KNOX-16-009400).

If the required preshared key is not set up, train users to use the following procedure to set up the required setting:

- Go to Settings >> Network & Internet >> Hotspot & tethering.
- Enable "Wi-Fi hotspot".
- Tap on "Wi-Fi Hotspot" to the left of the slide to bring up the configuration options.
- Click the "Security" link and select "WPA2/WPA3-Personal" or "WPA3-Personal".

API: addUserRestriction, DISALLOW_CONFIG_TETHERING

Check Contents

This is a "User-Based Enforcement (UBE)" control.

Check a sample of Samsung phones at the site and verify the Wi-Fi hotspot preshared key (password) is set to "WPA2/WPA3-Personal" or "WPA3-Personal".

- Go to Settings >> Connections >> Mobile Hotspot and Tethering >> Mobile Hotspot.
- Select Network name >> Password >> Band.
- Click the "Security" link, and verify either "WPA2/WPA3-Personal" or "WPA3-Personal" have been selected.

If the Wi-Fi hotspot security is not set to "WPA2/WPA3-Personal" or "WPA3-Personal", this is a finding.

Vulnerability Number

V-276539

Documentable

False

Rule Version

KNOX-16-007700

Severity Override Guidance

Check Content Reference

Target Key

5714