{"id":"CVE-2026-5777","state":"PUBLISHED","title":"Security Misconfiguration Vulnerability in Atom 3x Projector","description":"This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or access controls. An unauthenticated attacker on the same network can exploit this vulnerability to obtain root-level access, leading to complete compromise of the targeted device.","publishedAt":"2026-04-10T11:40:55.335Z","updatedAt":"2026-04-10T12:42:10.282Z","severity":{"score":8.7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"CERT-In"},"assigner":"CERT-In","products":["EGate Atom 3X Projector"],"affected":[{"vendor":"EGate","product":"Atom 3X Projector","defaultStatus":"unaffected","versions":[{"version":"Wed Jun 18 10:35:47 CST 2025","status":"affected","lessThan":"Mar Tue 10 17:57:35 CST 2026","versionType":"date"}]}],"references":["https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0179"],"weaknesses":["CWE-306"],"ingestedAt":"2026-10-29T20:12:32.778Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/5xxx/CVE-2026-5777.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-5777","state":"PUBLISHED","datePublished":"2026-04-10T11:40:55.335Z","dateUpdated":"2026-04-10T12:42:10.282Z","assignerShortName":"CERT-In","assignerOrgId":"66834db9-ab24-42b4-be80-296b2e40335c","dateReserved":"2026-04-08T08:14:40.117Z"},"containers":{"cna":{"title":"Security Misconfiguration Vulnerability in Atom 3x Projector","descriptions":[{"lang":"en","value":"This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or access controls. An unauthenticated attacker on the same network can exploit this vulnerability to obtain root-level access, leading to complete compromise of the targeted device."}],"affected":[{"vendor":"EGate","product":"Atom 3X Projector","defaultStatus":"unaffected","versions":[{"version":"Wed Jun 18 10:35:47 CST 2025","status":"affected","lessThan":"Mar Tue 10 17:57:35 CST 2026","versionType":"date"}]}],"references":[{"url":"https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0179","tags":["third-party-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"HIGH","baseScore":8.7,"vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-306","lang":"en","description":"CWE-306 Missing authentication for critical function","type":"CWE"}]}],"providerMetadata":{"shortName":"CERT-In","orgId":"66834db9-ab24-42b4-be80-296b2e40335c","dateUpdated":"2026-04-10T11:40:55.335Z"},"cpeApplicability":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:egate:atom_3x_projector:*:*:*:*:*:*:*:*","versionStartIncluding":"wed_jun_18_10_35_47_cst_2025","versionEndExcluding":"mar_tue_10_17_57_35_cst_2026"}]}]}],"solutions":[{"lang":"en","value":"Upgrade Atom 3x Projector to latest version","supportingMedia":[{"type":"text/html","base64":false,"value":"Upgrade Atom 3x Projector to latest version"}]}],"credits":[{"lang":"en","value":"This vulnerability is reported by Chetan Nimbulkar","type":"finder"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.1"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-04-10T12:42:04.300592Z","id":"CVE-2026-5777","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-04-10T12:42:10.282Z"}}]}}}