CVE-2015-2291: Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability
(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.
Other sources
Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).
— CISA
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2291?
CVE-2015-2291 has a high severity rating due to its potential to allow local users to execute arbitrary code with kernel privileges.
How do I fix CVE-2015-2291?
To fix CVE-2015-2291, users should update the Intel Ethernet diagnostics driver to version 1.3.1.0 or later.
What software is affected by CVE-2015-2291?
CVE-2015-2291 affects Intel Ethernet diagnostics drivers IQVW32.sys and IQVW64.sys prior to version 1.3.1.0.
Can CVE-2015-2291 cause denial of service?
Yes, CVE-2015-2291 can cause a denial of service when exploited by a local user.
Is CVE-2015-2291 a remote exploit?
No, CVE-2015-2291 requires local access to exploit the vulnerability.