Intel · Ethernet Diagnostics Driver for Windows

CVE-2015-2291

Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability

Exploited in attacks Used by ransomware High 7.8 Attack chance: 16%

What it is

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.

CISA: Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).

What to do

Apply updates per vendor instructions.

Deadline for US federal agencies: March 3, 2023

Added to the CISA list: February 10, 2023
Published: August 9, 2017
Severity: High 7.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 16% in the top 3.2% of all known vulnerabilities
Weakness: CWE-20
More details: NVD · CVE.org · CISA

All references (4)

More exploited flaws from Intel

Added	Vulnerability	Product	Severity	Attack chance
Jan 28, 2022	Privilege EscalationCVE-2017-5689	Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability	Critical 9.8	92%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.