Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Aug 9, 2017 · Catalog

   Detected

   (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.

2. Feb 10, 2023 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Mar 3, 2023 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Oct 1, 2026 · Catalog

   Updated

   (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.

Affected

• cpe intel/ethernet diagnostics driver iqvw32.sys1.03.0.7
• cpe intel/ethernet diagnostics driver iqvw64.sys1.03.0.7
• vendor Intel Ethernet Diagnostics Driver for Windowsversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2015-2291

  Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).

  cisa.gov
• CVE.orgVulnerability recordCVE-2015-2291

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2015-2291

  30-day exploitation probability 9.0%

  first.org
• Exploit DatabasePublic exploit reference36392

  Public archive entry. The exploit body is not stored here.

  exploit-db.com
• NIST NVDVulnerability recordCVE-2015-2291

  (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x80862

  nvd.nist.gov
• Packet Storm SecurityCited referencehttp://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html

  Packet Storm link already published on the finding.

  packetstormsecurity.com

References

• Third Party Advisory · packetstormsecurity.com
• Broken Link · securityfocus.com
• CISA note · nvd.nist.gov
• Patch · security-center.intel.com
• Third Party Advisory · exploit-db.com
• CISA note · intel.com