STIGQter STIGQter: STIG Summary: Samsung Android 16 COBO Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 13 May 2026:

The Samsung Android device must be configured to disable Wi-Fi Aware for Work Profile apps.

DISA Rule

SV-279245r1140702_rule

Vulnerability Number

V-279245

Group Title

PP-MDF-993300

Rule Version

KNOX-16-010500

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the Samsung Android 16 device to disable Wi-Fi Aware for all Work Profile apps.

On the EMM console:

For each Work Profile app, configure the NEARBY_WIFI_DEVICE permission to "deny" to block the use of Wi-Fi Aware, if the app supports this feature. If the app does not support Wi-Fi Aware, there may not be a NEARBY_WIFI_DEVICE permission available.

Check Contents

Review device configuration settings to confirm Wi-Fi Aware is disabled for each work profile app.

This procedure is performed on the EMM console.

For each Work Profile app, verify the app is configured to deny the NEARBY_WIFI_DEVICE permission. Note: Not all apps will support Wi-Fi Aware and have the NEARBY_WIFI_DEVICE permission.

If on the EMM console, if the NEARBY_WIFI_DEVICE permission is not set to "deny" for all Work Profile apps that support Wi-Fi Aware, this is a finding.

Vulnerability Number

V-279245

Documentable

False

Rule Version

KNOX-16-010500

Severity Override Guidance

Review device configuration settings to confirm Wi-Fi Aware is disabled for each work profile app.

This procedure is performed on the EMM console.

For each Work Profile app, verify the app is configured to deny the NEARBY_WIFI_DEVICE permission. Note: Not all apps will support Wi-Fi Aware and have the NEARBY_WIFI_DEVICE permission.

If on the EMM console, if the NEARBY_WIFI_DEVICE permission is not set to "deny" for all Work Profile apps that support Wi-Fi Aware, this is a finding.

Check Content Reference

M

Target Key

5714