CVE-2015-2291 : (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Eth

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.

Published 2017-08-09 18:29:01

Updated 2025-02-04 21:15:09

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute codeDenial of service

Products affected by CVE-2015-2291

Intel » Ethernet Diagnostics Driver Iqvw32.sys » Version: 1.03.0.7
cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw32.sys:1.03.0.7:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Intel » Ethernet Diagnostics Driver Iqvw64.sys » Version: 1.03.0.7
cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw64.sys:1.03.0.7:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A

CVE-2015-2291 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).

Notes:

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00051.html; https://nvd.nist.gov/vuln/detail/CVE-2015-2291

Added on 2023-02-10 Action due date 2023-03-03

Exploit prediction scoring system (EPSS) score for CVE-2015-2291

EPSS FAQ

2.52%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 84 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-2291

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	134c704f-9b21-4f2e-91b3-4a467353bcc0	2025-02-04
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST	2025-01-22
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2015-2291

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2015-2291

https://www.exploit-db.com/exploits/36392/

Intel Network Adapter Diagnostic Driver - IOCTL Handling
Third Party Advisory;VDB Entry
http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html

Intel Network Adapter Diagnostic Driver IOCTL DoS ≈ Packet Storm
Third Party Advisory;VDB Entry
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr

INTEL-SA-00051
Patch;Vendor Advisory
http://www.securityfocus.com/bid/79623

Intel Network Adapter Diagnostic Driver CVE-2015-2291 Multiple Local Buffer Overflow Vulnerabilities
Third Party Advisory;VDB Entry