CVE-2026-30495 Details
Description
The Optoma CinemaX P2 projector (firmware TVOS-04.24.010.04.01, Android 8.0.0) exposes Android Debug Bridge (ADB) on TCP port 5555 over the network without requiring authentication. The device is configured with ro.adb.secure=0, which disables RSA key verification. Additionally, a functional su binary exists at /system/xbin/su that grants root privileges without authentication. An attacker on the same network can connect to the device via ADB, obtain a shell, and escalate to root privileges, gaining complete control of the device. This allows extraction of stored WiFi credentials, installation of persistent malware, and access to all device data.
A vulnerability in the Optoma CinemaX P2 projector, running firmware TVOS-04.24.010.04.01 and Android 8.0.0, allows for unauthenticated remote root access via the Android Debug Bridge (ADB) over TCP port 5555. The device's ADB is exposed on the network without authentication, and a functional 'su' binary is available, granting root privileges. This vulnerability enables an attacker on the same network to connect to the device, escalate privileges to root, and gain full control, including access to stored WiFi credentials and the ability to install persistent malware.
Optoma has released a firmware update in March 2026 that addresses the ADB vulnerability, but this update is not available through the on-device updater and is not listed on the Optoma USA download page. Projector owners should manually apply the March 2026 firmware from the Optoma Europe download page. However, the unauthenticated control API vulnerability on port 2345 remains unaddressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 8, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://whitelabel.org/security/2026-02-01-smart-projector/ | [email protected] |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-285 | Improper Authorization | CISA-ADP |
Affected Products
No affected product data is available for this CVE.
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 8, 2026 | CVE Modified | CISA-ADP |
| May 7, 2026 | New CVE Received | [email protected] |