An unauthenticated remote root privilege escalation vulnerability in the Optoma CinemaX P2 projector allows adjacent attackers to gain complete control over the device.

This vulnerability involves an insecure network service configuration where Android Debug Bridge (ADB) is exposed on TCP port 5555 without authentication, combined with disabled RSA key verification and an unauthenticated root su binary. Attackers with adjacent network access can connect via ADB and execute commands with root privileges.

A successful exploit grants an attacker complete administrative control over the affected projector. This leads to the compromise of sensitive data such as stored Wi-Fi credentials, the potential installation of persistent malware, and the repurposing of the hardware for further network attacks. The high CVSS score of 8.8 reflects the severity of total system compromise achievable by an adjacent attacker.

Immediate Action: Restrict network access to the projector by placing it on an isolated management VLAN or firewalling TCP port 5555 to prevent unauthorized adjacent connections.

Proactive Monitoring: Monitor local network traffic for unauthorized inbound connections targeting TCP port 5555 on projector IP addresses.

Compensating Controls: Implement strict network segmentation and port security controls to ensure that only trusted administrative systems can communicate with smart devices on the internal network.

Public Exploit Available: Yes, a published PoC exists, per the security researcher write-up referenced in the vulnerability record.

Security teams must treat this vulnerability with high urgency due to the total loss of device integrity it permits. Administrators should immediately implement network firewall rules blocking access to TCP port 5555 and monitor vendor communication channels for official firmware updates that address the insecure ADB configuration.