CVE-2026-5777: ADB Root Access in Atom 3X Projector

该漏洞的影响极其严重，攻击者无需身份验证即可通过本地网络访问 ADB 服务。一旦成功，攻击者可以获得设备的 root 权限，这意味着他们可以完全控制投影仪的操作系统和所有数据。攻击者可以执行恶意代码、窃取敏感信息（例如存储在设备上的凭据或个人数据）、修改系统设置，甚至完全擦除设备。由于 ADB 允许对设备进行广泛的控制，因此该漏洞的潜在影响范围非常广，可能导致设备被完全控制和数据泄露。

Users of the Atom 3X Projector, particularly those in shared environments like offices, schools, or public spaces, are at significant risk. Individuals relying on the projector for sensitive data storage or presentations are especially vulnerable. Those with legacy configurations or who have not implemented network segmentation are also at increased risk.

• android / device:

Get-Process | Where-Object {$_.ProcessName -like '*adb*"}

• android / device: Check for ADB connections from unexpected IP addresses using adb devices and comparing the output with a known list of authorized devices. • android / device: Monitor system logs for ADB connection attempts from unknown sources. • android / device: Review installed applications for suspicious ADB-related components. • android / device: Use Android Debug Bridge (ADB) to check the current version of the device's software.

1. 2026-04-10Disclosure

   disclosure

2. 2026-04-10Patch

   patch

1. 已保留2026-04-08
2. 发布日期2026-04-10
3. EPSS 更新日期2026-04-17

最有效的缓解措施是立即将 Atom 3X 投影仪更新到修复版本 Mar Tue 10 17:57:35 CST 2026。如果无法立即更新，可以尝试在网络层面上限制对投影仪的访问，例如使用防火墙规则阻止未经授权的设备连接到投影仪的网络。此外，禁用投影仪上的 ADB 服务（如果可能）也可以降低风险。在更新后，请确认 ADB 服务已正确配置，并已启用适当的身份验证和访问控制。