ViewSonic's vCast software, a component of ViewBoard smartboards, suffers from multiple critical vulnerabilities. These weaknesses can be exploited in sequence by an attacker to gain complete control of the device. The smartboards are commonly found in businesses and schools. vCast facilitates wireless connections between these Android-based devices and client applications. Three specific vulnerabilities affect unauthenticated endpoints within the vCast suite.One vulnerability allows remote attackers to steal JPEG screenshots of the screen content via specific API requests. Another flaw enables the triggering of unprivileged file installations by supplying a malicious APK URL to an exposed download endpoint. A third vulnerability permits remote attackers to inject arbitrary input into service endpoints through HTTP requests. By chaining these vulnerabilities, an unauthenticated attacker can execute arbitrary code on a vCast device without user interaction. This can lead to unauthorized access to displayed content and persistent installation of malicious applications. Exploited devices could also serve as a gateway for lateral movement on a connected network. ViewSonic has not yet been reached for comment or to coordinate a fix. Users are advised to apply firmware updates when available and isolate vCast devices on secure, separate networks. Monitoring network traffic for suspicious vCast connections is also recommended.