Threats tagged 'ghsa-mm28-jjfm-w9mv'

The Optoma CinemaX P2 projector running firmware TVOS-04.24.010.04.01 on Android 8.0.0 exposes an unauthenticated HTTP API on TCP port 2345. This API allows any device on the same network to fully control the projector, including reading and modifying settings such as volume, brightness, power state, network protocols, and display modes. No authentication is required to access these controls, posing a critical security risk.