Impact
A vulnerability in the Miracast over Infrastructure Connection Establishment (MICE) service allows an unauthenticated attacker with network access to exhaust the service's connection capacity, causing subsequent Miracast connection attempts to fail. This denial‑of‑service can block all legitimate MICE‑based Miracast connections while the attack persists. Because MICE is disabled by default, the impact is limited to devices and configurations where the service has been explicitly enabled.
Affected Systems
The flaw affects WolfVision devices including Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro, Cynap Pure (Next Gen), Cynap Videobar, Cynap, Cynap Core, and Cynap Pure SDM. Specific firmware or software version information is not supplied in the advisory, so any device running these products with MICE enabled is potentially vulnerable.
Risk and Exploitability
The CVSS score of 6.9 indicates a medium severity risk, and the lack of an EPSS score or KEV listing suggests a lower overall likelihood of widespread exploitation at present. However, the vulnerability is accessible over the network on TCP port 7250, meaning any host connected to the same network can trigger the attack without authentication. The attacker can send traffic to consume available connection slots, monopolizing the MICE service and denying service to all other users until the condition is resolved or the device is refreshed. Users and administrators should treat the vulnerability as a potential DoS threat that can disrupt Miracast functionality in infrastructure mode.
OpenCVE Enrichment