Android 12 devices must have the latest available Google Android 12 operating system installed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-250448	GOOG-12-010800	SV-250448r802696_rule		High

Description
Required security features are not available in earlier operating system versions. In addition, there may be known vulnerabilities in earlier versions. SFR ID: FMT_SMF_EXT.1.1 #47

STIG	Date
Google Android 12 COPE Security Technical Implementation Guide	2021-09-17

Details

Check Text ( C-53883r796850_chk )
Review device configuration settings to confirm the Google Android device has the mobile operating system (MOS)t recently released version of managed Google Android 12 installed. This procedure is performed on both the EMM console and the managed Google Android 12 device. In the EMM management console, review the version of Google Android 12 installed on a sample of managed devices. This procedure will vary depending on the EMM product. On the managed Google Android 12 device, to determine the installed operating system version: COBO and COPE: 1. Open Settings. 2. Tap "About phone". 3. Verify "Build number". If the installed version of the Google Android 12 operating system on any reviewed devices is not the latest released by Google, this is a finding. Google's Android operating system patch website: https://source.android.com/security/bulletin/ Android versions for Pixel devices: https://developers.google.com/android/images

Check Text ( C-53883r796850_chk )

Review device configuration settings to confirm the Google Android device has the mobile operating system (MOS)t recently released version of managed Google Android 12 installed.

This procedure is performed on both the EMM console and the managed Google Android 12 device.

In the EMM management console, review the version of Google Android 12 installed on a sample of managed devices. This procedure will vary depending on the EMM product.

On the managed Google Android 12 device, to determine the installed operating system version:

COBO and COPE:

1. Open Settings.
2. Tap "About phone".
3. Verify "Build number".

If the installed version of the Google Android 12 operating system on any reviewed devices is not the latest released by Google, this is a finding.

Google's Android operating system patch website: https://source.android.com/security/bulletin/

Android versions for Pixel devices: https://developers.google.com/android/images

Fix Text (F-53837r796851_fix)
Install the latest released version of the Google Android 12 operating system on all managed Google devices. Note: Google Android device operating system updates are released directly by Google or can be distributed via the EMM. Check each device manufacturer and/or Carriers for current updates.