LG Android 6.x must not allow protocols supporting wireless remote access connections: USB tethering.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-66871	LGA6-20-100903	SV-81361r2_rule		Medium

Description
Having wireless remote access connections enabled could allow establishment of unauthorized remote access connections, which may give an adversary unintended capabilities. These remote access connections would expose the mobile device to additional risk, thereby increasing the likelihood of compromise of the confidentiality and integrity of its resident data. In this context, tethering refers to wired connections to an external device and not use of the device as a hotspot. A mobile device providing personal hotspot functionality is not considered wireless remote access if the functionality only provides access to a distribution network (such as a mobile carrier's cellular data network) and does not provide access to local applications or data. SFR ID: FMT_SMF_EXT.1.1 #23

Description

Having wireless remote access connections enabled could allow establishment of unauthorized remote access connections, which may give an adversary unintended capabilities. These remote access connections would expose the mobile device to additional risk, thereby increasing the likelihood of compromise of the confidentiality and integrity of its resident data. In this context, tethering refers to wired connections to an external device and not use of the device as a hotspot. A mobile device providing personal hotspot functionality is not considered wireless remote access if the functionality only provides access to a distribution network (such as a mobile carrier's cellular data network) and does not provide access to local applications or data. SFR ID: FMT_SMF_EXT.1.1 #23

STIG	Date
LG Android 6.x Security Technical Implementation Guide	2019-02-21

Details

Check Text ( C-67507r2_chk )
This validation procedure is performed on both the MDM Administration Console and the LG Android device. On the MDM console, do the following: 1. Ask the MDM administrator to display the "Allow USB tethering" setting in the MDM console. 2. Verify the setting is disabled. 3. Verify the policy has been assigned to all groups. On the LG Android device: Open the device settings. For AT&T devices: -Select Settings >> Networks >> Tethering. -Verify "USB tethering" setting is set to “off” and disabled (grayed out). For Verizon devices: -Open status bar and then click "Use USB connection for". -Verify "Tethering" option is set to “off” and disabled (grayed out). If on the MDM console "Allow USB tethering" is not disabled or if on the LG Android device the USB tethering option is not set to “off” and disabled, this is a finding.

Check Text ( C-67507r2_chk )

This validation procedure is performed on both the MDM Administration Console and the LG Android device.

On the MDM console, do the following:

1. Ask the MDM administrator to display the "Allow USB tethering" setting in the MDM console.
2. Verify the setting is disabled.
3. Verify the policy has been assigned to all groups.

On the LG Android device:

Open the device settings.

For AT&T devices:
-Select Settings >> Networks >> Tethering.
-Verify "USB tethering" setting is set to “off” and disabled (grayed out).

For Verizon devices:
-Open status bar and then click "Use USB connection for".
-Verify "Tethering" option is set to “off” and disabled (grayed out).

If on the MDM console "Allow USB tethering" is not disabled or if on the LG Android device the USB tethering option is not set to “off” and disabled, this is a finding.

Fix Text (F-72971r2_fix)
Configure the mobile operating system to disable wireless remote access connections. On the MDM Administration Console, disable "USB tethering".