CVE-2015-2291

Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability — Intel / Ethernet Diagnostics Driver for Windows

Risk tier: Critical — known ransomware use

Description

Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).

NVD enrichment (full description, CVSS vector, CWEs) has not completed for this CVE yet — shown above is the CISA KEV short description only.

Scoring

  • CVSS: Not yet available
  • EPSS exploitation probability: Not yet available
  • EPSS percentile: Not yet available

CISA KEV status

  • Added to KEV: 2023-02-10
  • Remediation due date: 2023-03-03
  • Known ransomware campaign use: Known
  • CVE-2017-5689 — Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability

All exploited vulnerabilities