CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-08-09
Intel Ethernet Diagnostics Driver (IQVW32.sys/IQVW64.sys) Local Privilege Escalation and Arbitrary Code Execution via IOCTL Input Validation Vulnerability (CVE-2015-2291)
[Affected Scope] Intel Ethernet diagnostics drivers (IQVW32.sys and IQVW64.sys) before version 1.3.1.0 on Windows platforms
[Impact] Local attackers can execute arbitrary code with kernel-level (SYSTEM) privileges or trigger a Denial of Service (BSOD) via crafted IOCTL calls
[Mitigation] Upgrade the Intel network adapter driver to version 1.3.1.0 or higher, and enable the Windows Vulnerable Driver Blocklist to prevent exploitation