Smart Card Readers (SCRs) used with smartphone must have required software version installed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-24982	WIR-MOS-AND-002	SV-35012r1_rule	ECSC-1	Low

Description
Required security features are not available in earlier software versions. In addition, there may be known vulnerabilities in earlier versions.

STIG	Date
Android 2.2 (Dell) Security Technical Implementation Guide	2014-08-26

Details

Check Text ( C-34888r1_chk )
Detailed Policy Requirements: SCR: Biometric Associates, LP (BAL) baiMobile BAL-3000MP Bluetooth Smart Card Reader. Firmware version v2.01.00 or later should be used (version v2.02.00 is recommended). Check Procedures: Check a sample of site readers (3-4). The version of the reader firmware is displayed when the user presses and holds the Action button for a couple of seconds. Mark as a finding if the firmware version on the SCR is not the approved version.

Check Text ( C-34888r1_chk )

Detailed Policy Requirements:

SCR: Biometric Associates, LP (BAL) baiMobile BAL-3000MP Bluetooth Smart Card Reader. Firmware version v2.01.00 or later should be used (version v2.02.00 is recommended).

Check Procedures:
Check a sample of site readers (3-4). The version of the reader firmware is displayed when the user presses and holds the Action button for a couple of seconds.

Mark as a finding if the firmware version on the SCR is not the approved version.

Fix Text (F-27623r1_fix)
Install required SCR software version.