CVE-2015-2291KEV · OVERDUECWE-20

Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability

High · published August 9, 2017

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 95.2th percentile for exploit probability.

1329
days past CISA
deadline
CVSS v3.1
7.8
EPSS
9%
Percentile
95.2
In the wild
Confirmed
What it is

🚨 A local user can trigger a denial of service or even execute arbitrary code with just a crafted IOCTL call in the Intel Ethernet diagnostics driver! 🔥 Think of the driver as a skilled tech support agent who can perform all sorts of tasks on your computer. If that agent gets a fake request from a user, they might follow it unwittingly, leading to chaos instead of assistance! In the wrong hands, this vulnerability could allow an attacker to crash whole systems or run malicious code with kernel privileges! Imagine your tech support agent being manipulated to erase vital files or grant access to sensitive information—absolutely devastating!

Put simply

Think of the driver as a skilled tech support agent who can perform all sorts of tasks on your computer. If that agent gets a fake request from a user, they might follow it unwittingly, leading to chaos instead of assistance! This vulnerability exists in the IQVW32.sys and IQVW64.sys files, where specific IOCTL calls allow local users to manipulate driver behavior, potentially leading to a denial of service or arbitrary code execution without proper authorization.

What to do

In the wrong hands, this vulnerability could allow an attacker to crash whole systems or run malicious code with kernel privileges! Imagine your tech support agent being manipulated to erase vital files or grant access to sensitive information—absolutely devastating! Update the Intel Ethernet diagnostics driver to version 1.3.1.0 or later immediately to close this security hole. It's also wise to audit your systems for any suspicious activity related to this vulnerability. Don't forget to educate your users on the importance of avoiding unverified requests! You've got this! By following these steps, you're not just patching a vulnerability, you're fortifying your defenses like a true security hero! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.09011 · 95.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2017-08-09T22:29Z
KEV added
2023-02-10 · due 2023-03-03
Affected products (2)
ProductVersionsFixed in
intel/ethernet_diagnostics_driver_iqvw32.sysall versions—
intel/ethernet_diagnostics_driver_iqvw64.sysall versions—
References (9)
EPSS history
Timeline
  • 10 FEB 00:00Z
    Added to CISA KEV — remediate by Mar 3
    kev
  • 09 AUG 18:00Z
    (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of…
    cvelistv5