PoC Index

CVE-2015-2291

KEV RANSOMWAREHIGH 7.8EPSS 9.0%

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.

CVSS v3.1
7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1
7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
9.01% chance of exploitation in the next 30 days, 95th percentile
CISA KEV
added 2023-02-10, used in ransomware campaigns
Published
2017-08-09
Updated
2026-08-04

Proof-of-concept exploits (3)

ExploitDB entries (1)

References

Related