Dell Updates PowerSwitch and Secure Connect Gateway Flaws

Affected Environment
Dell PowerSwitch E3200-ON, Z9664F-ON, and Dell Policy Manager for Secure Connect Gateway – Appliance running vulnerable third‑party components. Exposure applies where affected versions are deployed and not yet upgraded to Dell’s remediated software releases listed in the advisory.

Threat Overview
Vulnerabilities in Intel, rsync, Angular, Apache Maven, Apache Tomcat, Java, SLES15 and SLES 15 SP6, and logback impact these Dell products. Successful exploitation could enable authentication bypass, command execution, privilege escalation, information disclosure, or denial of service.

Exposure Timeline
Dell published security updates in March 2026, and Smarttech247 issued this alert on 19 March 2026 for customer awareness.
Exposure exists from initial deployment of affected versions until upgrade to the specified fixed versions is completed in your environment.

Attack Surface
The attack surface includes network-exposed Dell PowerSwitch management and data plane services using the listed third‑party components. Dell Policy Manager for Secure Connect Gateway – Appliance surfaces risk through its application stack and underlying OS components.

Technical Root Cause
The root cause is multiple vulnerabilities in bundled third‑party software libraries and OS components used by the Dell products.
Weaknesses span protocol implementations, web frameworks, Java and logging components, and SUSE Linux Enterprise Server packages.

Exploitation Pathway
A malicious user could target vulnerable services to gain elevated access, execute commands, or disrupt services if network reachable. Specific exploit chains depend on each CVE but generally rely on interacting with exposed components or authenticated interfaces.