Description
A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legitimate users from establishing MICE-based Miracast connections while the condition persists.
Miracast P2P is not affected. MICE is disabled in the default configuration and must be explicitly enabled by the customer. On most devices, Miracast P2P is available independently of MICE, but a complete disruption of Miracast can occur on some devices when WLAN is configured for Infrastructure mode.
Published: 2026-10-26
Score: 6.9 Medium
EPSS: n/a
KEV: No
Impact: Denial of Service via Resource Exhaustion
Action: Restrict Access
AI Analysis

Impact

A vulnerability in the Miracast over Infrastructure Connection Establishment (MICE) service allows an unauthenticated attacker with network access to exhaust the service's connection capacity, causing subsequent Miracast connection attempts to fail. This denial‑of‑service can block all legitimate MICE‑based Miracast connections while the attack persists. Because MICE is disabled by default, the impact is limited to devices and configurations where the service has been explicitly enabled.

Affected Systems

The flaw affects WolfVision devices including Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro, Cynap Pure (Next Gen), Cynap Videobar, Cynap, Cynap Core, and Cynap Pure SDM. Specific firmware or software version information is not supplied in the advisory, so any device running these products with MICE enabled is potentially vulnerable.

Risk and Exploitability

The CVSS score of 6.9 indicates a medium severity risk, and the lack of an EPSS score or KEV listing suggests a lower overall likelihood of widespread exploitation at present. However, the vulnerability is accessible over the network on TCP port 7250, meaning any host connected to the same network can trigger the attack without authentication. The attacker can send traffic to consume available connection slots, monopolizing the MICE service and denying service to all other users until the condition is resolved or the device is refreshed. Users and administrators should treat the vulnerability as a potential DoS threat that can disrupt Miracast functionality in infrastructure mode.

Generated by OpenCVE AI on October 27, 2026 at 01:21 UTC.

Remediation

Vendor Workaround

Until an update can be applied, consider the following measures where operationally feasible: * Restrict access to the MICE service on TCP port 7250 to trusted hosts only. WolfVision recommends keeping devices up to date and using dedicated, managed network segments (VLAN or firewall zone) to restrict device access to trusted hosts only.


OpenCVE Recommended Actions

  • Configure your network firewall or VLAN to allow traffic to port 7250 only from trusted hosts to limit exposure to the MICE service.
  • Disable the MICE service entirely if it is not required, as it is disabled by default in the current firmware.
  • Apply any firmware or software update released by WolfVision that addresses this vulnerability once it becomes available.
  • Continuously monitor traffic on TCP port 7250 for abnormal activity that could indicate a resource exhaustion attack.

Generated by OpenCVE AI on October 27, 2026 at 01:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 26 Oct 2026 20:00:00 +0000

Type Values Removed Values Added
Description A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legitimate users from establishing MICE-based Miracast connections while the condition persists. Miracast P2P is not affected. MICE is disabled in the default configuration and must be explicitly enabled by the customer. On most devices, Miracast P2P is available independently of MICE, but a complete disruption of Miracast can occur on some devices when WLAN is configured for Infrastructure mode.
Title Resource Exhaustion in MICE Service
Weaknesses CWE-400
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: ENISA

Published:

Updated: 2026-10-26T19:45:17.820Z

Reserved: 2026-08-04T07:41:00.082Z

Link: CVE-2026-70380

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-26T20:18:35.820

Modified: 2026-10-26T20:18:35.820

Link: CVE-2026-70380

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-27T01:30:16Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption