CVE-2015-2291 is listed by CISA as a Known Exploited Vulnerability affecting Intel Ethernet Diagnostics Driver for Windows and described as a denial-of-service issue. The KEV record was added on 2023-02-10 with a remediation due date of 2023-03-03. The supplied record also marks known ransomware campaign use as "Known," which raises the operational priority for any environment still running the affected driver.
CVE-2017-5689 is listed by CISA as a Known Exploited Vulnerability affecting Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability. The catalog description identifies it as a privilege escalation issue and directs defenders to apply vendor updates. Because it appears in the KEV catalog, it should be treated as a remediation priority for any environment using [truncated]