CVE-2015-2291VulnerabilityPublished 02/10/2023Updated 10/24/2026
CVE-2015-2291: Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability
Affects Intel Ethernet Diagnostics Driver for WindowsSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 02/10/2023
- KEV deadline
- 03/03/2023
- Ransomware
- Used in ransomware campaigns
- EPSS
- 9.0% chance of exploitation in 30 days – higher than 95% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).