Smartfabric Os10 Software
Monthly
Code execution is possible on Dell SmartFabric OS10 switches running versions prior to 10.6.1.3 because the platform downloads code and software images without validating their integrity (CWE-494), so a high-privileged administrator - or an attacker who has already hijacked such an account - can make the device fetch and execute attacker-supplied code. The vendor rates this 9.1 using CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, but the flaw is explicitly not pre-authentication: remote network reachability to the management plane plus existing administrative credentials are mandatory, which is why CISA's SSVC assessment records Exploitation: none, Automatable: no, and Technical Impact: total, and no public exploit was identified at time of analysis. Dell has released a fixed build, OS10 10.6.1.3, under advisory DSA-2026-343.
Session fixation in Dell SmartFabric OS10 Software versions prior to 10.6.1.3 allows remote, unauthenticated attackers to plant or predict a management session identifier and subsequently hijack that session once a legitimate administrator logs in, resulting in session theft with the full privileges of the compromised account. Dell's published CVSS 3.1 vector scores this 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), but that score overstates the issue on two counts: successful exploitation hinges on a victim authenticating into the attacker-controlled session (effectively a user-interaction requirement, UI:R), and the real-world impact is bounded by the privileges of the hijacked account, making confidentiality and integrity exposure meaningful but not unconditional. There is no public exploit identified at time of analysis - CISA SSVC records no observed exploitation and no proof-of-concept code is referenced - and the attacker can only realize impact through a victim-logon step, so the practical risk is lower than the raw 9.8 suggests while still warranting prompt patching of internet- or management-plane-reachable deployments.
Command injection in Dell SmartFabric OS10 Software (versions prior to 10.5.6.14) allows a remotely-authenticated, high-privileged attacker to execute arbitrary OS commands via the network-accessible management interface. Dell disclosed and patched the issue through advisory DSA-2026-322, with version 10.5.6.14 as the confirmed fix. No public exploit code or active exploitation has been identified; the high-privilege and high-complexity prerequisites substantially constrain the realistic threat surface.
Code execution is possible on Dell SmartFabric OS10 switches running versions prior to 10.6.1.3 because the platform downloads code and software images without validating their integrity (CWE-494), so a high-privileged administrator - or an attacker who has already hijacked such an account - can make the device fetch and execute attacker-supplied code. The vendor rates this 9.1 using CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, but the flaw is explicitly not pre-authentication: remote network reachability to the management plane plus existing administrative credentials are mandatory, which is why CISA's SSVC assessment records Exploitation: none, Automatable: no, and Technical Impact: total, and no public exploit was identified at time of analysis. Dell has released a fixed build, OS10 10.6.1.3, under advisory DSA-2026-343.
Session fixation in Dell SmartFabric OS10 Software versions prior to 10.6.1.3 allows remote, unauthenticated attackers to plant or predict a management session identifier and subsequently hijack that session once a legitimate administrator logs in, resulting in session theft with the full privileges of the compromised account. Dell's published CVSS 3.1 vector scores this 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), but that score overstates the issue on two counts: successful exploitation hinges on a victim authenticating into the attacker-controlled session (effectively a user-interaction requirement, UI:R), and the real-world impact is bounded by the privileges of the hijacked account, making confidentiality and integrity exposure meaningful but not unconditional. There is no public exploit identified at time of analysis - CISA SSVC records no observed exploitation and no proof-of-concept code is referenced - and the attacker can only realize impact through a victim-logon step, so the practical risk is lower than the raw 9.8 suggests while still warranting prompt patching of internet- or management-plane-reachable deployments.
Command injection in Dell SmartFabric OS10 Software (versions prior to 10.5.6.14) allows a remotely-authenticated, high-privileged attacker to execute arbitrary OS commands via the network-accessible management interface. Dell disclosed and patched the issue through advisory DSA-2026-322, with version 10.5.6.14 as the confirmed fix. No public exploit code or active exploitation has been identified; the high-privilege and high-complexity prerequisites substantially constrain the realistic threat surface.