Database/Firmware, BMC & network fabric
Dell SmartFabric Manager: low-privileged remote user can read information it should not see
Impact
SmartFabric Manager is the fabric control point for Dell switch fabrics, which in an accelerator pod carries the east-west storage and management topology. An authenticated user with low privileges can read information the permission model should withhold, which in a fabric manager means topology, configuration and potentially credential-adjacent data useful for moving laterally across the management network. Dell classifies this as information disclosure only - no integrity or availability impact is claimed. Exposure is limited to whoever already has an account on the manager.
Who can reach it
Remote, authenticated low-privileged user of the SmartFabric Manager interface - normally reachable only from the management VLAN.
What to do
Upgrade SmartFabric Manager to 2.2.1 or later per DSA-2026-317. This is a management-appliance upgrade and does not touch switch data-plane forwarding or require draining GPU nodes, but schedule it as a fabric-management maintenance window since fabric orchestration is unavailable during the restart.
References
Related entries
- HPE iLO 6 (denial of service): An unauthenticated attacker on an adjacent network can knock out iLO 6 availabilityCVE-2026-63457 · HPE iLO 6 (denial of service)Medium
- Dell OpenManage Enterprise: XML external entity processing exposes information to a low-privileged userCVE-2026-70423 · Dell OpenManage Enterprise (XML external entity processing)Medium
- Dell OpenManage Enterprise: path traversal exposes information to a low-privileged remote userCVE-2026-70424 · Dell OpenManage Enterprise (path traversal in a restricted-directory check)Medium
- Arista EOS: DHCP relay forwards replies from unconfigured servers, allowing client config spoofingCVE-2026-73437 · Arista EOS DHCP relay (helper-address source validation)Medium
- Dell OMSA: authenticated path traversal lets a low-privileged user read files off the nodeCVE-2026-81453 · Dell OpenManage Server Administrator (path traversal, authenticated)Medium
- RNIC on-board SRAM metadata cache (page table entries, QP context) - most widely deployed RDMA NIC: RNICs cacheNCVD-2019-003-rnic-on-board-sram-metadata-cach · RNIC on-board SRAM metadata cache (page table entries, QP context) - most widely deployed RDMA NICMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.