Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-25020 | WIR-MOS-iOS-041 | SV-34931r1_rule | ECWN-1 | Low |
Description |
---|
The Wi-Fi radio can be used by a hacker to connect to the smartphone without the knowledge of the user. Sensitive DoD data could be exposed and the hacker could use the device to attack the enclave. |
STIG | Date |
---|---|
Apple iOS 4 (Good Mobility Suite) Interim Security Configuration Guide (ISCG) | 2011-11-07 |
Check Text ( C-31223r1_chk ) |
---|
The user will never enable the Wi-Fi radio unless authorized to use Wi-Fi (User Based Enforcement (UBE)). On a sample of site-managed iOS devices (pick 3-4 random devices), check that the Wi-Fi radio is turned off. -Have the user turn on and log into the device. -Go to Settings > WiFi. Wi-Fi should be turned off. Mark as a finding if configuration is not set as required. |
Fix Text (F-27691r1_fix) |
---|
Disable the smartphone Wi-Fi radio unless authorized for use and only when Wi-Fi connectivity is required. |