Dell SmartFabric OS10 (command injection): Command injection in SmartFabric OS10 10.5.5.4-10.5.5.10 and 10.5.6.x

Impact

Command injection in SmartFabric OS10 10.5.5.4-10.5.5.10 and 10.5.6.x. Listed as a distinct entry because its affected-version window is narrower than the later OS10 command-injection batch, so a fleet on 10.5.5.x needs this specific fix even if it has applied a 10.6.x-targeted advisory elsewhere.

Who can reach it

An attacker able to supply input to the affected OS10 command path.

What to do

OS10 upgrade plus switch reload. Verify the fixed-version table against your exact running build — Dell's OS10 advisories have heavily overlapping but non-identical version ranges and it is easy to conclude you are patched when you are not.

References