Resource Exhaustion in MICE Service
What fixes it
- 1.78aCynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure ProCVE List
- 2.00dCynap Pure (Next Gen)CVE List
- 1.72eCynap VideobarCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legitimate users from establishing MICE-based Miracast connections while the condition persists. Miracast P2P is not affected. MICE is disabled in the default configuration and must be explicitly enabled by the customer. On most devices, Miracast P2P is available independently of MICE, but a complete disruption of Miracast can occur on some devices when WLAN is configured for Infrastructure mode.
Text from CVE List
Affected versions 4
- Cynap Pro, Cynap Core Pro, Cynap Pure, Cynap Pure Mini, Cynap Pure Proaffected: all versions before 1.78aCVE List
- Cynap Pure (Next Gen)affected: all versions before 2.00dCVE List
- Cynap Videobaraffected: all versions before 1.72eCVE List
- Cynap, Cynap Core, Cynap Pure SDMaffected: version unspecifiedCVE List