Resource Exhaustion in MICE Service in WolfVision Cynap Products
Peripheral Devices
NTCF:
CVE-2026-70380
CVE:
CVE-2026-70380
Product:
Cynap Pure (Next Gen), Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro, Cynap Videobar, Cynap, Cynap Core, Cynap Pure SDM
Vendor:
WolfVision
Criticality:
medium
Status:
fixed
Discovered:
2026-07-28
Detail:
Public
Vulnerable version:
Cynap Pure (Next Gen): Firmware Version < v2.00d Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro: Firmware Version < v1.78a Cynap Videobar, Firmware Version < v1.72e Cynap, Cynap Core, Cynap Pure SDM: all firmware versions
Fixed version:
Cynap Pure (Next Gen): Firmware Version v2.00d Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro: Firmware Version v1.78a Cynap Videobar, Firmware Version v1.72e
Summary
A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legitimate users from establishing MICE-based Miracast connections while the condition persists.
Miracast P2P is not affected. MICE is disabled in the default configuration and must be explicitly enabled by the customer. On most devices, Miracast P2P is available independently of MICE, but a complete disruption of Miracast can occur on some devices when WLAN is configured for Infrastructure mode.
Remediation
Affected devices should be updated to the following firmware versions as soon as possible:
-
Cynap Pure (Next Gen): firmware version v2.00d
- Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro: firmware version v1.78a
- Cynap Videobar: firmware version v1.72e
These models are affected and will receive no firmware fix:
-
Cynap
-
Cynap Core
- Cynap Pure SDM
No firmware fix is planned for these discontinued models. Decommission them when feasible, or restrict access to the affected services to trusted hosts and networks.
Timeline
2026-07-28: initial discovery
2026-07-30: first contact to vendor
2026-07-30: private disclosure to vendor
2026-10-21: fix by vendor
2026-10-21: public disclosure