What is CVE-2015-2291?

CVE-2015-2291 is a high-severity vulnerability in Intel Ethernet diagnostics drivers for Windows, specifically IQVW32.sys and IQVW64.sys before version 1.3.1.0. This vulnerability allows local users to cause a denial of service or execute arbitrary code with kernel privileges through crafted IOCTL calls.

Who is impacted by this?

The vulnerability affects users of Intel Ethernet diagnostics drivers for Windows, specifically IQVW32.sys and IQVW64.sys before version 1.3.1.0. Systems running these drivers, including various versions of Windows XP, Windows 7, Windows 8, and Windows Server, are at risk.

What to do if CVE-2015-2291 affected you

If you're affected by the CVE-2015-2291 vulnerability, it's crucial to take action to protect your system. Here's a simple step-by-step guide:

1. Identify if your system is running the affected Intel Ethernet diagnostics drivers (IQVW32.sys before 1.3.1.0 or IQVW64.sys before 1.3.1.0).

2. Check for available updates from Intel to address the vulnerability.

3. Apply the updates to your system as soon as possible.

4. Monitor your system for any unusual activity or signs of compromise.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2015-2291 vulnerability, also known as Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability, is indeed listed in CISA's Known Exploited Vulnerabilities Catalog. It was added on February 10, 2023, with a due date of March 3, 2023. To address this vulnerability, users must apply updates as per the vendor's instructions.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-20, which involves improper input validation in Intel Ethernet diagnostics drivers for Windows.

Learn More

For a comprehensive understanding of this vulnerability, consult the NVD page and the sources listed below.

• Intel Network Adapter Diagnostic Driver IOCTL DoS

• Intel Network Adapter Diagnostic Driver - IOCTL Handling