Free DISA STIG and SRG Library | Vaulted

V-228602

Google Android 11 devices must have the latest available Google Android 11 operating system installed.

Finding ID
GOOG-11-010800
Rule ID
SV-228602r510289_rule
Severity
Cat I
CCE
(None)
Group Title
PP-MDF-991000
CCI
CCI-000366
Target Key
(None)
Documentable
No
Discussion

Required security features are not available in earlier operating system versions. In addition, there may be known vulnerabilities in earlier versions. SFR ID: FMT_SMF_EXT.1.1 #47

Fix Text

Install the latest released version of the Google Android 11 operating system on all managed Google devices. NOTE: Google Android device operating system updates are released directly by Google or can be distributed via the EMM. Android versions for Pixel devices can be found at https://developers.google.com/android/images

Check Content

Review device configuration settings to confirm the Google Android device has the most recently released version of Google Android 11 installed. This procedure is performed on both the EMM console and the Google Android 11 device. In the EMM management console, review the version of Google Android 11 installed on a sample of managed devices. This procedure will vary depending on the EMM product. On the Google Android 11 device, to see the installed operating system version: 1. Open Settings. 2. Tap "About phone". 3. Verify "Build number". If the installed version of the Android operating system on any reviewed Google devices is not the latest released by Google, this is a finding. Google's Android operating system patch website: https://source.android.com/security/bulletin/ Android versions for Pixel devices: https://developers.google.com/android/images