You (or rather your matrix persona) need to have an attack or sleaze rating if You want to take an Attack or Sleaze action.
If You base your matrix persona on a RCC then you don't have an attack or sleaze rating (but You now instead have access to multiple channels to send the same instruction to multiple slaved drones and You can compensate for noise etc).
If You base your matrix persona on a commlink then you normally don't have an attack or sleaze rating (but they are often rather cheap for the amount of firewall they provide, and if you use advanced rules there are actually dongles that could provide you with an attack or sleaze rating).
If You base your matrix persona on a cyberdeck then you will have access to attack or sleaze ratings (but in case you are a technomancer you will not have access to your resonance rating).
Ie. Can you do a Data Spike test using a slaved commlink, using a Control Device test to make the commlink to do what would be possible if you were the owner of it?
No.
Device just provide the persona running on it with matrix attributes. Devices themselves don't take matrix actions on their own, personas do.
You need to reboot the device you are currently using as well as the commlink with the attack dongle, then you base your matrix persona on ("log on to the matrix with") the commlink that got an attack dongle. Now You (or rather your matrix persona) have an Attack rating and You can take the Data Spike action.