# CVE-2015-2291: Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability

Source: https://junglewise.ai/threats/cve-2015-2291-intel-ethernet-diagnostics-driver-for-windows-denial-of-service  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2023-02-10. Updated: 2026-05-10  
License: CC BY 4.0 with a link back

CVE-2015-2291 · Severity: critical · CVSS 7.8 · Exploited in the wild · Published 2023-02-10

The Intel Ethernet diagnostics driver for Windows (IQVW32.sys and IQVW64.sys) contains a vulnerability in its IOCTL handling. Local users can issue crafted IOCTL calls to cause a denial of service or potentially execute arbitrary code with kernel privileges.

Vendors: [Intel](https://junglewise.ai/threats/vendors/intel).

## Quick answers

**Is CVE-2015-2291 exploited in the wild?** Yes. CVE-2015-2291 is known to be exploited in the wild, first recorded on 10 February 2023. Treat it as urgent.

**How severe is CVE-2015-2291?** Critical severity, with a CVSS score of 7.8, published 10 February 2023.

**Which products and versions are affected?** Intel Ethernet diagnostics driver IQVW32.sys before 1.3.1.0; Intel Ethernet diagnostics driver IQVW64.sys before 1.3.1.0.

**Is there a fix for CVE-2015-2291?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2015-2291 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2015-2291?** Check whether you run Intel Ethernet Diagnostics Driver for Windows. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Intel Ethernet diagnostics driver IQVW32.sys before 1.3.1.0
- Intel Ethernet diagnostics driver IQVW64.sys before 1.3.1.0

## Timeline

- 2017-08-09: disclosed: NVD Published Date
- 2023-02-10: kev added: Added to CISA Known Exploited Vulnerabilities Catalog