Read the docs
TI-2026-80569 Aliases CVE-2026-70380GHSA-wfr2-8788-xvrh

Resource exhaustion in WolfVision Cynap MICE service

Priority LOW 36CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-400.

Summary

WolfVision Cynap products are affected, including Cynap Pro before 1.78a, Cynap Pure (Next Gen) before 2.00d and Cynap Videobar before 1.72e. The Miracast over Infrastructure Connection Establishment (MICE) service has uncontrolled resource consumption (CWE-400). An unauthenticated remote attacker with network access can consume the available MICE connection capacity, preventing legitimate users from establishing MICE-based Miracast connections while the condition persists. MICE is disabled in the default configuration and Miracast P2P is not affected.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

Description from the CNA

A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legitimate users from establishing MICE-based Miracast connections while the condition persists. Miracast P2P is not affected. MICE is disabled in the default configuration and must be explicitly enabled by the customer. On most devices, Miracast P2P is available independently of MICE, but a complete disruption of Miracast can occur on some devices when WLAN is configured for Infrastructure mode.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00306 23rd percentileScored 2026-11-07
Fix Fixed Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro (WolfVision): 1.78aCynap Pure (Next Gen) (WolfVision): 2.00d+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
WolfVisionCynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Probefore 1.78a1.78aPatch availableCNA
WolfVisionCynap Pure (Next Gen)before 2.00d2.00dPatch availableCNA
WolfVisionCynap Videobarbefore 1.72e1.72ePatch availableCNA
WolfVisionCynap, Cynap Core, Cynap Pure SDMall versions—No fix listedCNA
  • Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro VendorWolfVision Affected before 1.78a Fixed in 1.78a Patch available CNA
  • Cynap Pure (Next Gen) VendorWolfVision Affected before 2.00d Fixed in 2.00d Patch available CNA
  • Cynap Videobar VendorWolfVision Affected before 1.72e Fixed in 1.72e Patch available CNA
  • Cynap, Cynap Core, Cynap Pure SDM VendorWolfVision Affected all versions Fixed in — No fix listed CNA

Remediation

Update Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini and Cynap Pure Pro to 1.78a, Cynap Pure (Next Gen) to 2.00d and Cynap Videobar to 1.72e. The sources list no fixed version for Cynap, Cynap Core and Cynap Pure SDM.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

  • Fix · CNA Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro (WolfVision) Fixed in 1.78a
  • Fix · CNA Cynap Pure (Next Gen) (WolfVision) Fixed in 2.00d
  • Fix · CNA Cynap Videobar (WolfVision) Fixed in 1.72e

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    WolfVision Cynap Videobar 1.72e

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2026-80580 Web server exposes internal resources in WolfVision Cynap devicesPriority LOW 36
    • TI-2026-80581 Stored cross-site scripting in WolfVision Cynap web interfacePriority LOW 23
    Show all 3 records →

Timeline

  1. 2026-10-26 Threatist record created from CVE-2026-70380
  2. 2026-10-27 Alias added: GHSA-wfr2-8788-xvrh
  3. 2026-10-27 Priority changed: MEDIUM → LOW
  4. 2026-11-02 CISA SSVC decision points changed

References

Advisory 1

  • TI-2026-80352 OS command injection in WolfVision WolfProt interface CVSS 4.0CRITICAL 9.3
  • TI-2026-80353 Shared SSH key in WolfVision vSolution Matrix file sharing CVSS 4.0CRITICAL 9.2
  • TI-2019-10032 WolfVision Cynap before 1.30j uses a static, hard-coded cryptographic secret for… CVSS 3.0CRITICAL 9.8
  • TI-2026-80580 Web server exposes internal resources in WolfVision Cynap devices CVSS 4.0MEDIUM 6.9
  • TI-2026-80533 WolfVision Cynap Unauthorized Access to vSolution Matrix RTSP Stream CVSS 4.0HIGH 7.1
  • TI-2026-80581 Stored cross-site scripting in WolfVision Cynap web interface CVSS 4.0MEDIUM 5.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences