ACTIVELY EXPLOITED

CVE-2015-2291: Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability

Facts
Vendor	Intel
Product	Ethernet Diagnostics Driver for Windows
Actively exploited	Yes
Added to CISA KEV	10 Feb 2023
CISA federal deadline	3 Mar 2023
Ransomware use	Known
Weakness (CWE)	CWE-20

Required action (CISA's text)

Apply updates per vendor instructions.

Description (NVD)

Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).

SOURCES

CISA KEVCISA Known Exploited Vulnerabilities catalog

Other Intel flaws

CVE-2017-5689: Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability

Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.