## Summary
Dell SmartFabric OS10 Software (versions prior to 10.6.1.3) contains a Download of Code Without Integrity Check weakness. With remote access and high privileges, an attacker could leverage this to achieve code execution.
## Technical Details
- Vulnerability class: CWE-494 (Download of Code Without Integrity Check)
- Root issue (per NVD): downloaded code is not integrity-checked before use
- Attack prerequisites (per NVD): attacker must have high privileges and remote access
- Likely consequence (per NVD): attacker-controlled code execution leading to full compromise impact (confidentiality, integrity, availability)
## Affected
- Dell SmartFabric OS10 versions prior to 10.6.1.3
## Impact
- Code execution on affected systems
- High severity per provided metrics: CVSS 9.1 with AV:N and AC:L
- Security impact described by NVD vector: C:H, I:H, A:H, with scope change (S:C)
## Mitigation
1. Upgrade Dell SmartFabric OS10 to 10.6.1.3 or later (fix is described as “versions prior to 10.6.1.3”).
2. Restrict remote access paths and tightly control accounts with high privileges, since exploitation requires both remote access and high privileges.
3. Validate that the running OS image matches the patched release after maintenance windows.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-494