Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability

cve CVE-2015-2291 3 sources, 3 claims · Watch

CISA Known Exploited Vulnerabilities writes:
Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS). Apply updates per vendor instructions. https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00051.html; https://nvd.nist.gov/vuln/detail/CVE-2015-2291 the claim

Severity: HIGH NVD
CVSS: 7.8 NVD
Exploited: yes CISA Known Exploited Vulnerabilities
Known ransomware campaign use: Known CISA Known Exploited Vulnerabilities
Due date: 2023-03-03 CISA Known Exploited Vulnerabilities
Vendor: Intel CISA Known Exploited Vulnerabilities
n/a NVD
Product: Ethernet Diagnostics Driver for Windows CISA Known Exploited Vulnerabilities
n/a NVD
CWE: CWE-20 CISA Known Exploited Vulnerabilities
CWE-20 NVD

How far exploitation has got

No public code known
Proof of concept · Exploit-DB 2015-03-14
Proof of concept, verified
A Metasploit module
Exploited in the wild · CISA Known Exploited Vulnerabilities 2023-02-10
Used in ransomware campaigns · CISA Known Exploited Vulnerabilities 2023-02-10

Timeline

2015-03-14	first spoke of it: Intel Network Adapter Diagnostic Driver - IOCTL Handling	Exploit-DB
2017-08-09	first spoke of it: Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability	NVD
2023-02-10	first spoke of it: Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability	CISA Known Exploited Vulnerabilities
2023-03-03	Due date	CISA Known Exploited Vulnerabilities

What it is to other things

affects	intel/ethernet_diagnostics_driver_iqvw32.sys NVD
affects	intel/ethernet_diagnostics_driver_iqvw64.sys NVD
affects	microsoft/windows NVD
made_by	intel NVD
made_by	microsoft NVD

In words only, so not counted until a person confirms one:

made_by	`n_a` NVD says “n/a”
affects	`intel/ethernet_diagnostics_driver_for_windows` CISA Known Exploited Vulnerabilities says “Intel · Ethernet Diagnostics Driver for Windows”
affects	`n_a/n_a` NVD says “n/a · n/a”

Every value, with what each source said and its receipt

Property Source Said Means here

Author

author

Exploit-DB

Glafkos Charalambous

receipt

Source: Exploit-DB
Its words: Glafkos Charalambous
Read by: field:author
Said since: 2026-09-29 09:40 UTC
Last answered: 2026-10-06 12:11 UTC
Original: open at the source

What the source handed over

{
  "aliases": "",
  "application_url": "",
  "author": "Glafkos Charalambous",
  "codes": "CVE-2015-2291;OSVDB-119634;OSVDB-119633",
  "date_added": "2015-03-16",
  "date_published": "2015-03-14",
  "date_updated": "2015-03-16",
  "description": "Intel Network Adapter Diagnostic Driver - IOCTL Handling",
  "file": "exploits/windows/dos/36392.txt",
  "id": "36392",
  "platform": "windows",
  "port": "",
  "screenshot_url": "",
  "source_url": "",
  "tags": "",
  "type": "dos",
  "verified": "0"
}

—

Automatable

automatable

NVD

At least one of those steps needs a person.

receipt

Source: NVD
Its words: no
Read by: field:cve.metrics.ssvcV203[].ssvcData.options[].automatable
Said since: 2026-10-06 11:54 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 11:54 UTC	no
2026-10-02 12:00 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "cve@mitre.org"
      }
    ],
    "cisaActionDue": "2023-03-03",
    "cisaExploitAdd": "2023-02-10",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw32.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "94AFBAC8-D782-4CDC-B961-0EEAD97DA0A3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw64.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "B82125E5-B02D-4021-8D5C-DEB11C87CAFB",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call."
      },
      {
        "lang": "es",
        "value": "(1) IQVW32.sys en versiones anteriores a la 1.3.1.0 y (2) IQVW64.sys en versiones anteriores a la 1.3.1.0 en el controlador de diagnósticos de Intel Ethernet para Windows permite que usuarios locales provoquen una denegación de servicio o, posiblemente, ejecuten código arbitrario con privilegios kernel mediante una llamada IOCTL (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F o (d) 0x80862007 manipulada."
      }
    ],
    "id": "CVE-2015-2291",
    "lastModified": "2026-10-01T19:17:11.830",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": true,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2015-2291",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-04T03:55:49.728526Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2017-08-09T18:29:00.933",
    "references": [
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2291"
      }
    ],
    "sourceIdentifier": "cve@mitre.org",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

CVSS

cvss

NVD

7.8

receipt

Source: NVD
Its words: 7.8
Read by: field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseScore || field:cve.metrics.cvssMetricV31[].cvssData.baseScore
Said since: 2026-10-02 12:00 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "cve@mitre.org"
      }
    ],
    "cisaActionDue": "2023-03-03",
    "cisaExploitAdd": "2023-02-10",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw32.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "94AFBAC8-D782-4CDC-B961-0EEAD97DA0A3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw64.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "B82125E5-B02D-4021-8D5C-DEB11C87CAFB",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call."
      },
      {
        "lang": "es",
        "value": "(1) IQVW32.sys en versiones anteriores a la 1.3.1.0 y (2) IQVW64.sys en versiones anteriores a la 1.3.1.0 en el controlador de diagnósticos de Intel Ethernet para Windows permite que usuarios locales provoquen una denegación de servicio o, posiblemente, ejecuten código arbitrario con privilegios kernel mediante una llamada IOCTL (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F o (d) 0x80862007 manipulada."
      }
    ],
    "id": "CVE-2015-2291",
    "lastModified": "2026-10-01T19:17:11.830",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": true,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2015-2291",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-04T03:55:49.728526Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2017-08-09T18:29:00.933",
    "references": [
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2291"
      }
    ],
    "sourceIdentifier": "cve@mitre.org",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

CVSS vector

cvss_vector

NVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

receipt

Source: NVD
Its words: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Read by: field:cve.metrics.cvssMetricV31[type=Primary].cvssData.vectorString || field:cve.metrics.cvssMetricV31[].cvssData.vectorString
Said since: 2026-10-06 11:54 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 11:54 UTC	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2026-10-02 12:00 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "cve@mitre.org"
      }
    ],
    "cisaActionDue": "2023-03-03",
    "cisaExploitAdd": "2023-02-10",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw32.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "94AFBAC8-D782-4CDC-B961-0EEAD97DA0A3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw64.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "B82125E5-B02D-4021-8D5C-DEB11C87CAFB",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call."
      },
      {
        "lang": "es",
        "value": "(1) IQVW32.sys en versiones anteriores a la 1.3.1.0 y (2) IQVW64.sys en versiones anteriores a la 1.3.1.0 en el controlador de diagnósticos de Intel Ethernet para Windows permite que usuarios locales provoquen una denegación de servicio o, posiblemente, ejecuten código arbitrario con privilegios kernel mediante una llamada IOCTL (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F o (d) 0x80862007 manipulada."
      }
    ],
    "id": "CVE-2015-2291",
    "lastModified": "2026-10-01T19:17:11.830",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": true,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2015-2291",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-04T03:55:49.728526Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2017-08-09T18:29:00.933",
    "references": [
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2291"
      }
    ],
    "sourceIdentifier": "cve@mitre.org",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

CWE

cwe

CISA Known Exploited Vulnerabilities

CWE-20

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: CWE-20
Read by: field:cwes
Said since: 2026-10-06 12:19 UTC
Last answered: 2026-10-06 17:36 UTC

2026-10-06 12:19 UTC	CWE-20
2026-09-28 11:44 UTC	—

What the source handed over

{
  "cveID": "CVE-2015-2291",
  "cwes": "CWE-20",
  "dateAdded": "2023-02-10",
  "dueDate": "2023-03-03",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00051.html; https://nvd.nist.gov/vuln/detail/CVE-2015-2291",
  "product": "Ethernet Diagnostics Driver for Windows",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).",
  "vendorProject": "Intel",
  "vulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability"
}

—

CWE

cwe

NVD

CWE-20

receipt

Source: NVD
Its words: CWE-20
Read by: field:cve.weaknesses[].description[].value
Said since: 2026-10-06 12:29 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 12:29 UTC	CWE-20
2026-10-06 11:54 UTC	CWE-20, CWE-20
2026-10-02 12:00 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "cve@mitre.org"
      }
    ],
    "cisaActionDue": "2023-03-03",
    "cisaExploitAdd": "2023-02-10",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw32.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "94AFBAC8-D782-4CDC-B961-0EEAD97DA0A3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw64.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "B82125E5-B02D-4021-8D5C-DEB11C87CAFB",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call."
      },
      {
        "lang": "es",
        "value": "(1) IQVW32.sys en versiones anteriores a la 1.3.1.0 y (2) IQVW64.sys en versiones anteriores a la 1.3.1.0 en el controlador de diagnósticos de Intel Ethernet para Windows permite que usuarios locales provoquen una denegación de servicio o, posiblemente, ejecuten código arbitrario con privilegios kernel mediante una llamada IOCTL (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F o (d) 0x80862007 manipulada."
      }
    ],
    "id": "CVE-2015-2291",
    "lastModified": "2026-10-01T19:17:11.830",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": true,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2015-2291",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-04T03:55:49.728526Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2017-08-09T18:29:00.933",
    "references": [
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2291"
      }
    ],
    "sourceIdentifier": "cve@mitre.org",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

CWES

cwes

CISA Known Exploited Vulnerabilities

CWE-20

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: CWE-20
Read by: field:cwes
Said since: 2026-09-28 11:44 UTC
Last answered: 2026-10-06 17:36 UTC

What the source handed over

{
  "cveID": "CVE-2015-2291",
  "cwes": "CWE-20",
  "dateAdded": "2023-02-10",
  "dueDate": "2023-03-03",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00051.html; https://nvd.nist.gov/vuln/detail/CVE-2015-2291",
  "product": "Ethernet Diagnostics Driver for Windows",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).",
  "vendorProject": "Intel",
  "vulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability"
}

—

Due date

due_date

CISA Known Exploited Vulnerabilities

2023-03-03

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: 2023-03-03
Read by: field:dueDate
Said since: 2026-09-28 11:44 UTC
Last answered: 2026-10-06 17:36 UTC

What the source handed over

{
  "cveID": "CVE-2015-2291",
  "cwes": "CWE-20",
  "dateAdded": "2023-02-10",
  "dueDate": "2023-03-03",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00051.html; https://nvd.nist.gov/vuln/detail/CVE-2015-2291",
  "product": "Ethernet Diagnostics Driver for Windows",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).",
  "vendorProject": "Intel",
  "vulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability"
}

—

Exploitation

exploitation

NVD

active

Reliable evidence that it is exploited in the wild.

receipt

Source: NVD
Its words: active
Read by: field:cve.metrics.ssvcV203[].ssvcData.options[].exploitation
Said since: 2026-10-06 11:54 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 11:54 UTC	active
2026-10-02 12:00 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "cve@mitre.org"
      }
    ],
    "cisaActionDue": "2023-03-03",
    "cisaExploitAdd": "2023-02-10",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw32.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "94AFBAC8-D782-4CDC-B961-0EEAD97DA0A3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw64.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "B82125E5-B02D-4021-8D5C-DEB11C87CAFB",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call."
      },
      {
        "lang": "es",
        "value": "(1) IQVW32.sys en versiones anteriores a la 1.3.1.0 y (2) IQVW64.sys en versiones anteriores a la 1.3.1.0 en el controlador de diagnósticos de Intel Ethernet para Windows permite que usuarios locales provoquen una denegación de servicio o, posiblemente, ejecuten código arbitrario con privilegios kernel mediante una llamada IOCTL (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F o (d) 0x80862007 manipulada."
      }
    ],
    "id": "CVE-2015-2291",
    "lastModified": "2026-10-01T19:17:11.830",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": true,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2015-2291",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-04T03:55:49.728526Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2017-08-09T18:29:00.933",
    "references": [
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2291"
      }
    ],
    "sourceIdentifier": "cve@mitre.org",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Exploited

exploited

CISA Known Exploited Vulnerabilities

yes

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: yes
Read by: const:yes
Said since: 2026-09-28 11:44 UTC
Last answered: 2026-10-06 17:36 UTC

What the source handed over

{
  "cveID": "CVE-2015-2291",
  "cwes": "CWE-20",
  "dateAdded": "2023-02-10",
  "dueDate": "2023-03-03",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00051.html; https://nvd.nist.gov/vuln/detail/CVE-2015-2291",
  "product": "Ethernet Diagnostics Driver for Windows",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).",
  "vendorProject": "Intel",
  "vulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability"
}

—

Forensic triage

forensic_triage

CISA Known Exploited Vulnerabilities

false

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: No
Read by: field:forensicTriage
Said since: 2026-09-28 11:44 UTC
Last answered: 2026-10-06 17:36 UTC

What the source handed over

{
  "cveID": "CVE-2015-2291",
  "cwes": "CWE-20",
  "dateAdded": "2023-02-10",
  "dueDate": "2023-03-03",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00051.html; https://nvd.nist.gov/vuln/detail/CVE-2015-2291",
  "product": "Ethernet Diagnostics Driver for Windows",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).",
  "vendorProject": "Intel",
  "vulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability"
}

—

Known ransomware campaign use

known_ransomware_campaign_use

CISA Known Exploited Vulnerabilities

Known

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: Known
Read by: field:knownRansomwareCampaignUse
Said since: 2026-09-28 11:44 UTC
Last answered: 2026-10-06 17:36 UTC

What the source handed over

{
  "cveID": "CVE-2015-2291",
  "cwes": "CWE-20",
  "dateAdded": "2023-02-10",
  "dueDate": "2023-03-03",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00051.html; https://nvd.nist.gov/vuln/detail/CVE-2015-2291",
  "product": "Ethernet Diagnostics Driver for Windows",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).",
  "vendorProject": "Intel",
  "vulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability"
}

—

Platform

platform

Exploit-DB

windows

receipt

Source: Exploit-DB
Its words: windows
Read by: field:platform
Said since: 2026-09-29 09:40 UTC
Last answered: 2026-10-06 12:11 UTC
Original: open at the source

What the source handed over

{
  "aliases": "",
  "application_url": "",
  "author": "Glafkos Charalambous",
  "codes": "CVE-2015-2291;OSVDB-119634;OSVDB-119633",
  "date_added": "2015-03-16",
  "date_published": "2015-03-14",
  "date_updated": "2015-03-16",
  "description": "Intel Network Adapter Diagnostic Driver - IOCTL Handling",
  "file": "exploits/windows/dos/36392.txt",
  "id": "36392",
  "platform": "windows",
  "port": "",
  "screenshot_url": "",
  "source_url": "",
  "tags": "",
  "type": "dos",
  "verified": "0"
}

—

Product

product

different words

CISA Known Exploited Vulnerabilities

Ethernet Diagnostics Driver for Windows

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: Ethernet Diagnostics Driver for Windows
Read by: field:product
Said since: 2026-09-28 11:44 UTC
Last answered: 2026-10-06 17:36 UTC

What the source handed over

{
  "cveID": "CVE-2015-2291",
  "cwes": "CWE-20",
  "dateAdded": "2023-02-10",
  "dueDate": "2023-03-03",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00051.html; https://nvd.nist.gov/vuln/detail/CVE-2015-2291",
  "product": "Ethernet Diagnostics Driver for Windows",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).",
  "vendorProject": "Intel",
  "vulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability"
}

—

Product

product

different words

NVD

n/a

receipt

Source: NVD
Its words: n/a
Read by: field:cve.affected[].affectedData[].product
Said since: 2026-10-02 12:00 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "cve@mitre.org"
      }
    ],
    "cisaActionDue": "2023-03-03",
    "cisaExploitAdd": "2023-02-10",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw32.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "94AFBAC8-D782-4CDC-B961-0EEAD97DA0A3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw64.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "B82125E5-B02D-4021-8D5C-DEB11C87CAFB",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call."
      },
      {
        "lang": "es",
        "value": "(1) IQVW32.sys en versiones anteriores a la 1.3.1.0 y (2) IQVW64.sys en versiones anteriores a la 1.3.1.0 en el controlador de diagnósticos de Intel Ethernet para Windows permite que usuarios locales provoquen una denegación de servicio o, posiblemente, ejecuten código arbitrario con privilegios kernel mediante una llamada IOCTL (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F o (d) 0x80862007 manipulada."
      }
    ],
    "id": "CVE-2015-2291",
    "lastModified": "2026-10-01T19:17:11.830",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": true,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2015-2291",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-04T03:55:49.728526Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2017-08-09T18:29:00.933",
    "references": [
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2291"
      }
    ],
    "sourceIdentifier": "cve@mitre.org",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Severity

severity

NVD

HIGH

From 7.0 to 8.9.

receipt

Source: NVD
Its words: HIGH
Read by: field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseSeverity || field:cve.metrics.cvssMetricV31[].cvssData.baseSeverity
Said since: 2026-10-06 11:54 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 11:54 UTC	HIGH
2026-10-02 12:00 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "cve@mitre.org"
      }
    ],
    "cisaActionDue": "2023-03-03",
    "cisaExploitAdd": "2023-02-10",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw32.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "94AFBAC8-D782-4CDC-B961-0EEAD97DA0A3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw64.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "B82125E5-B02D-4021-8D5C-DEB11C87CAFB",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call."
      },
      {
        "lang": "es",
        "value": "(1) IQVW32.sys en versiones anteriores a la 1.3.1.0 y (2) IQVW64.sys en versiones anteriores a la 1.3.1.0 en el controlador de diagnósticos de Intel Ethernet para Windows permite que usuarios locales provoquen una denegación de servicio o, posiblemente, ejecuten código arbitrario con privilegios kernel mediante una llamada IOCTL (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F o (d) 0x80862007 manipulada."
      }
    ],
    "id": "CVE-2015-2291",
    "lastModified": "2026-10-01T19:17:11.830",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": true,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2015-2291",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-04T03:55:49.728526Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2017-08-09T18:29:00.933",
    "references": [
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2291"
      }
    ],
    "sourceIdentifier": "cve@mitre.org",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

high

Status

status

NVD

Analyzed

receipt

Source: NVD
Its words: Analyzed
Read by: field:cve.vulnStatus
Said since: 2026-10-02 12:00 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "cve@mitre.org"
      }
    ],
    "cisaActionDue": "2023-03-03",
    "cisaExploitAdd": "2023-02-10",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw32.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "94AFBAC8-D782-4CDC-B961-0EEAD97DA0A3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw64.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "B82125E5-B02D-4021-8D5C-DEB11C87CAFB",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call."
      },
      {
        "lang": "es",
        "value": "(1) IQVW32.sys en versiones anteriores a la 1.3.1.0 y (2) IQVW64.sys en versiones anteriores a la 1.3.1.0 en el controlador de diagnósticos de Intel Ethernet para Windows permite que usuarios locales provoquen una denegación de servicio o, posiblemente, ejecuten código arbitrario con privilegios kernel mediante una llamada IOCTL (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F o (d) 0x80862007 manipulada."
      }
    ],
    "id": "CVE-2015-2291",
    "lastModified": "2026-10-01T19:17:11.830",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": true,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2015-2291",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-04T03:55:49.728526Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2017-08-09T18:29:00.933",
    "references": [
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2291"
      }
    ],
    "sourceIdentifier": "cve@mitre.org",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Technical impact

technical_impact

NVD

partial

The attacker gains limited control, or limited information.

receipt

Source: NVD
Its words: partial
Read by: field:cve.metrics.ssvcV203[].ssvcData.options[].technicalImpact
Said since: 2026-10-06 11:54 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 11:54 UTC	partial
2026-10-02 12:00 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "cve@mitre.org"
      }
    ],
    "cisaActionDue": "2023-03-03",
    "cisaExploitAdd": "2023-02-10",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw32.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "94AFBAC8-D782-4CDC-B961-0EEAD97DA0A3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw64.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "B82125E5-B02D-4021-8D5C-DEB11C87CAFB",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call."
      },
      {
        "lang": "es",
        "value": "(1) IQVW32.sys en versiones anteriores a la 1.3.1.0 y (2) IQVW64.sys en versiones anteriores a la 1.3.1.0 en el controlador de diagnósticos de Intel Ethernet para Windows permite que usuarios locales provoquen una denegación de servicio o, posiblemente, ejecuten código arbitrario con privilegios kernel mediante una llamada IOCTL (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F o (d) 0x80862007 manipulada."
      }
    ],
    "id": "CVE-2015-2291",
    "lastModified": "2026-10-01T19:17:11.830",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": true,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2015-2291",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-04T03:55:49.728526Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2017-08-09T18:29:00.933",
    "references": [
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2291"
      }
    ],
    "sourceIdentifier": "cve@mitre.org",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Type

type

Exploit-DB

dos

receipt

Source: Exploit-DB
Its words: dos
Read by: field:type
Said since: 2026-09-29 09:40 UTC
Last answered: 2026-10-06 12:11 UTC
Original: open at the source

What the source handed over

{
  "aliases": "",
  "application_url": "",
  "author": "Glafkos Charalambous",
  "codes": "CVE-2015-2291;OSVDB-119634;OSVDB-119633",
  "date_added": "2015-03-16",
  "date_published": "2015-03-14",
  "date_updated": "2015-03-16",
  "description": "Intel Network Adapter Diagnostic Driver - IOCTL Handling",
  "file": "exploits/windows/dos/36392.txt",
  "id": "36392",
  "platform": "windows",
  "port": "",
  "screenshot_url": "",
  "source_url": "",
  "tags": "",
  "type": "dos",
  "verified": "0"
}

—

Vendor

vendor

different words

CISA Known Exploited Vulnerabilities

Intel

receipt

Source: CISA Known Exploited Vulnerabilities
Last answered: 2026-10-06 17:36 UTC

What the source handed over

{
  "cveID": "CVE-2015-2291",
  "cwes": "CWE-20",
  "dateAdded": "2023-02-10",
  "dueDate": "2023-03-03",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00051.html; https://nvd.nist.gov/vuln/detail/CVE-2015-2291",
  "product": "Ethernet Diagnostics Driver for Windows",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).",
  "vendorProject": "Intel",
  "vulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability"
}

—

Vendor

vendor

different words

NVD

n/a

receipt

Source: NVD
Its words: n/a
Read by: field:cve.affected[].affectedData[].vendor
Said since: 2026-10-02 12:00 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "cve@mitre.org"
      }
    ],
    "cisaActionDue": "2023-03-03",
    "cisaExploitAdd": "2023-02-10",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw32.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "94AFBAC8-D782-4CDC-B961-0EEAD97DA0A3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:a:intel:ethernet_diagnostics_driver_iqvw64.sys:1.03.0.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "B82125E5-B02D-4021-8D5C-DEB11C87CAFB",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          },
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA",
                "vulnerable": false
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ],
        "operator": "AND"
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call."
      },
      {
        "lang": "es",
        "value": "(1) IQVW32.sys en versiones anteriores a la 1.3.1.0 y (2) IQVW64.sys en versiones anteriores a la 1.3.1.0 en el controlador de diagnósticos de Intel Ethernet para Windows permite que usuarios locales provoquen una denegación de servicio o, posiblemente, ejecuten código arbitrario con privilegios kernel mediante una llamada IOCTL (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F o (d) 0x80862007 manipulada."
      }
    ],
    "id": "CVE-2015-2291",
    "lastModified": "2026-10-01T19:17:11.830",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": true,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2015-2291",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-04T03:55:49.728526Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2017-08-09T18:29:00.933",
    "references": [
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://packetstormsecurity.com/files/130854/Intel-Network-Adapter-Diagnostic-Driver-IOCTL-DoS.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link",
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "http://www.securityfocus.com/bid/79623"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Patch",
          "Vendor Advisory"
        ],
        "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00051&languageid=en-fr"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Third Party Advisory",
          "VDB Entry"
        ],
        "url": "https://www.exploit-db.com/exploits/36392/"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2291"
      }
    ],
    "sourceIdentifier": "cve@mitre.org",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-20"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Verified

verified

Exploit-DB

false

receipt

Source: Exploit-DB
Its words: 0
Read by: field:verified
Said since: 2026-09-29 09:40 UTC
Last answered: 2026-10-06 12:11 UTC
Original: open at the source

What the source handed over

{
  "aliases": "",
  "application_url": "",
  "author": "Glafkos Charalambous",
  "codes": "CVE-2015-2291;OSVDB-119634;OSVDB-119633",
  "date_added": "2015-03-16",
  "date_published": "2015-03-14",
  "date_updated": "2015-03-16",
  "description": "Intel Network Adapter Diagnostic Driver - IOCTL Handling",
  "file": "exploits/windows/dos/36392.txt",
  "id": "36392",
  "platform": "windows",
  "port": "",
  "screenshot_url": "",
  "source_url": "",
  "tags": "",
  "type": "dos",
  "verified": "0"
}

—

Every claim, by kind

vulnerability

Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability zetlyn/cve-kev · 2023-02-10	cwe CWE-20 cwes CWE-20 due_date 2023-03-03 exploited yes forensic_triage false known_ransomware_campaign_use Known product Ethernet Diagnostics Driver for Windows vendor Intel
Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability zetlyn/cve-nvd · 2017-08-09	automatable no cvss 7.8 cvss_vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H cwe CWE-20 exploitation active product n/a severity HIGH status Analyzed technical_impact partial vendor n/a	source

exploit

Intel Network Adapter Diagnostic Driver - IOCTL Handling

zetlyn/cve-exploitdb · 2015-03-14

author Glafkos Charalambous platform windows type dos verified false

source