Intel PCIe Switch Software Privilege Escalation Vulnerability

A vulnerability allowing improper access control has been identified in some firmware packages and the LED mode toggle tool for Intel PCIe Switch software, prior to version MR4_1.0b1. This vulnerability may enable a privileged user to escalate privileges through local access.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Remediation

Intel has issued a product discontinuation notice for the firmware package and LED mode toggle tool for Intel PCIe Switch software, effective April 4, 2025. Users are advised to uninstall or discontinue use of these tools as soon as possible.