Dell SmartFabric OS10 (default password): A default password in SmartFabric OS10 across 10.5.4.x through 10.6.0.x

Impact

A default password in SmartFabric OS10 across 10.5.4.x through 10.6.0.x, usable remotely by a low-privileged attacker to escalate. Default credentials on a datacenter switch are the same failure the BMC world has been fighting for a decade — the switch arrives with a working account nobody in the deployment checklist knows to remove.

Who can reach it

Low-privileged attacker with remote access to the switch.

What to do

OS10 upgrade plus reload. Also add a switch-intake step that enumerates and disables every non-provisioned local account, the same way you rotate BMC credentials at rack intake — a process change that catches the next one of these before an advisory does.

References