{"id":"CVE-2026-70380","kind":"vulnerability","aliases":["CVE-2026-70380"],"related":[],"title":"Miracast MICE service: unauthenticated network denial of service on connection capacity","description":"A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment (MICE) service. An unauthenticated attacker with network access to the MICE service could consume available connection capacity, preventing legitimate users from establishing MICE-based Miracast connections while the condition persists.\nMiracast P2P is not affected. MICE is disabled in the default configuration and must be explicitly enabled by the customer. On most devices, Miracast P2P is available independently of MICE, but a complete disruption of Miracast can occur on some devices when WLAN is configured for Infrastructure mode.","summary":"The Miracast over Infrastructure Connection Establishment (MICE) service can be overwhelmed by an unauthenticated attacker on the network, exhausting connection capacity. While the condition lasts, legitimate devices cannot set up MICE-based Miracast connections.","severity":"medium","cvss":6.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","miracast","wireless-display","wlan"],"not_affected_if":["default-config","miracast-p2p-only"],"how_to_check":"- Check whether MICE is enabled on the device, which the sources say is off by default; the sources do not name a setting or command.\n- Check whether WLAN runs in Infrastructure mode on devices that use Miracast, since the sources say full disruption can occur in that mode.","fix":null,"status":"open","published_at":"2026-10-26T20:18:35+00:00","first_seen_at":"2026-10-26T20:50:18+00:00","triaged_at":"2026-10-26T20:51:41+00:00","updated_at":"2026-10-26T20:51:41+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T20:51:41Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Miracast MICE service: unauthenticated network denial of service on connection capacity","impact":"low","summary":"The Miracast over Infrastructure Connection Establishment (MICE) service can be overwhelmed by an unauthenticated attacker on the network, exhausting connection capacity. While the condition lasts, legitimate devices cannot set up MICE-based Miracast connections.","category":"infrastructure","nicknames":[],"who_cares":["miracast","wireless-display","wlan"],"confidence":0.5,"needs_auth":"no","worst_case":"Legitimate MICE-based Miracast connections are blocked while the attack persists.","analyst_note":"Find the vendor advisory and affected product versions and the fix; the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-70380 may name them.","how_to_check":"- Check whether MICE is enabled on the device, which the sources say is off by default; the sources do not name a setting or command.\n- Check whether WLAN runs in Infrastructure mode on devices that use Miracast, since the sources say full disruption can occur in that mode.","needs_analyst":true,"not_affected_if":["default-config","miracast-p2p-only"],"who_is_affected":"Devices with MICE explicitly enabled by the customer are exposed, and the sources say MICE is disabled in the default configuration. Miracast P2P is not affected, and on most devices it works independently of MICE. Devices with WLAN in Infrastructure mode may see complete Miracast disruption, not only MICE connections. The sources do not name the vendor or product versions.","user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000643,"input_tokens":3418,"output_tokens":602,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-70380':14A,17A 'access':82C 'affect':110C 'attack':38B,79C 'avail':89C,132C 'base':56B,99C 'cannot':51B 'capac':11A,44B,91C 'complet':138C 'condit':47B,104C 'configur':117C,150C 'connect':10A,28B,43B,58B,73C,90C,101C 'consum':88C 'could':87C 'custom':125C 'cve':12A,15A 'default':116C 'denial':6A,61C 'denial-of-servic':60C 'devic':50B,128C,146C 'disabl':113C 'display':22B 'disrupt':139C 'enabl':122C 'establish':29B,74C,96C 'exhaust':42B 'explicit':121C 'identifi':67C 'independ':133C 'infrastructur':18B,27B,72C,152C 'last':48B 'legitim':49B,93C 'mice':2A,30B,55B,75C,85C,98C,111C,135C 'mice-bas':54B,97C 'miracast':1A,19B,25B,57B,70C,100C,106C,129C,141C 'mode':153C 'must':119C 'network':5A,41B,81C 'occur':143C 'overwhelm':34B 'p2p':107C,130C 'persist':105C 'prevent':92C 'servic':3A,8A,31B,63C,76C,86C 'set':52B 'unauthent':4A,37B,78C 'user':94C 'vulner':64C 'wireless':21B 'wireless-display':20B 'wlan':23B,148C","nicknames":[],"mitigations":[],"who_affected":"Devices with MICE explicitly enabled by the customer are exposed, and the sources say MICE is disabled in the default configuration. Miracast P2P is not affected, and on most devices it works independently of MICE. Devices with WLAN in Infrastructure mode may see complete Miracast disruption, not only MICE connections. The sources do not name the vendor or product versions.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T20:18:35+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-70380","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70380","severity":null,"published_at":"2026-10-26T20:18:35+00:00","modified_at":"2026-10-26T20:18:35+00:00","first_seen_at":"2026-10-26T20:50:18+00:00","fetched_at":"2026-10-26T20:50:18+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}