The Optoma CinemaX P2 projector runs Android 8.0.0 and exposes Android Debug Bridge on TCP port 5555 without any authentication. The device’s configuration disables RSA key verification by setting ro.adb.secure to 0, and it contains a /system/xbin/su binary that grants root privileges with no credential check. An attacker who can reach the projector on the local network can therefore connect to ADB, spawn a shell, and immediately elevate to full root access. This gives the attacker the ability to read stored Wi‑Fi credentials, install persistent malware, and access all data on the device. The flaw correlates with CWE‑285 (Improper Authorization).

Affected devices are Optoma CinemaX P2 projectors with firmware TVOS‑04.24.010.04.01 running Android 8.0.0. No other vendors or product versions are listed in the CNA data.

The CVSS score of 8.8 indicates a high severity, while the EPSS score of less than 1 % shows a low current exploitation probability. The vulnerability is trivial to exploit because it requires only local network connectivity and no authentication. The open ADB port and the presence of an unauthenticated root binary provide a direct attack vector. The flaw is not currently listed in the CISA KEV catalog, but its impact remains high due to the ease of achieving full control of the device.