ZeroDay Findings
Sign inSign up

Findings

CVE-2015-2291

Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability

Published Aug 9, 2017 · updated Oct 1, 2026 · intel ethernet diagnostics driver iqvw32.sys

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 9, 2017 · Catalog

    Detected

    (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.

  2. Feb 10, 2023 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Mar 3, 2023 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Oct 1, 2026 · Catalog

    Updated

    (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.

Required action

Apply updates per vendor instructions.

CISA due date Mar 3, 2023

Affected

  • cpe intel/ethernet diagnostics driver iqvw32.sys1.03.0.7
  • cpe intel/ethernet diagnostics driver iqvw64.sys1.03.0.7
  • vendor Intel Ethernet Diagnostics Driver for Windowsversion unspecified

Sources

  • CISA KEVCVE-2015-2291

    Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).

    cisa.gov
  • CVE.orgCVE-2015-2291

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2015-2291

    30-day exploitation probability 9.0%

    first.org
  • Exploit Database36392

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2015-2291

    (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x80862

    nvd.nist.gov
  • Packet Storm Securityhttp://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References