The Atom 3x Projector unintentionally exposes the Android Debug Bridge service over the local network without any authentication or access controls. An attacker who can reach the device on the same local network can connect to this service and execute commands with full system privileges, effectively gaining root access to the device. This allows the attacker to modify, delete, or exfiltrate any data stored on the projector, install additional malicious software, or use the compromised device as a pivot point for further attacks on the surrounding network.

All models of the EGate Atom 3X Projector are affected, regardless of firmware version. The advisory does not specify a particular revision, so any device running the current SKU should be considered at risk until an upgrade is applied.

The vulnerability receives a CVSS score of 8.7, indicating high severity. No EPSS data is available and the flaw is not listed in the CISA KEV catalog. The attack path is simple: any unauthenticated host on the same local network can scan for the standard ADB port, typically 5555, and establish a connection that grants full root control of the projector.