CVE Daily

CVE-2025-24323

Improper access control in some firmware package and LED mode toggle tool for so...

Medium CVSS 6.5

Overview

Improper access control in some firmware package and LED mode toggle tool for some Intel(R) PCIe Switch software before version MR4_1.0b1 may allow a privileged user to potentially enable escalation of privilege via local access.

CWE: CWE-284 Published: 2025-08-12T17:15:33.573
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.5 (MEDIUM)
  • Detected tags: misconfiguration (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags