Verified reproduction
CVE-2026-58453: JAIOTlink C492A-W6 Wi‑Fi IP camera firmware accepts default admin credentials (blank password) over HTTP Basic auth, enabling network‑adjacent attackers to access snapshots and privileged APIs.
CVE-2026-58453 is verified against jingwenyi/SmartCamera (Anyka N1 · firmware affected versions: 4.8.30.57701411 This critical reproduction includes runnable sandbox proof, artifacts, and a plain-text agent view under REPRO-2026-00255.
Severity CRITICAL
Confidence HIGH
Reproduced in 29m 42s
Tool calls 287
Spend $13.75
Affected 4.8.30.57701411
$
pruva-verify REPRO-2026-00255 or
curl -O https://pruva.dev/api/v1/reproductions/REPRO-2026-00255/artifacts/bundle/repro/reproduction_steps.sh && chmod +x reproduction_steps.sh && ./reproduction_steps.sh Run in a VM or disposable container. This exploits a real vulnerability.
JAIOTlink C492A-W6 Wi‑Fi IP cameras running firmware 4.8.30.57701411 accept a hard-coded default account (admin with an empty password) for the anyka_ipc HTTP service on port 80. A network‑adjacent attacker can authenticate with these default credentials to access snapshots, video streams, configuration, and factory API endpoints (including /NetSDK/Factory?cmd=SetMAC).
Variant analysis
The agent's step-by-step process — every tool call, every handoff, the moment the exploit fired. Phases: support triages the advisory · repro reproduces it · vuln_variant confirms the fix blocks it · judge verifies.
Loading session...
Scripts, logs, diffs, and output captured during the reproduction.
bundle/artifact_promotion_manifest.json29.1 KBbundle/vuln_variant/root_cause_equivalence.json1.8 KBbundle/repro/reproduction_steps.sh15.1 KBbundle/repro/app_default_credentials.txt0.4 KBbundle/repro/runtime_manifest.json3.9 KBbundle/logs/reproduction_steps.log5.0 KBbundle/repro/rca_report.md7.7 KBbundle/repro/validation_verdict.json0.7 KBbundle/repro/source_identity.txt2.7 KBbundle/repro/02-default-http-credentials.md3.8 KBbundle/repro/harness_sha256.txt0.2 KBbundle/logs/vulnerable_service_attempt1.log1.9 KBbundle/logs/vulnerable_attempt1_health.headers.txt0.2 KBbundle/logs/vulnerable_attempt1_health.body0.1 KBbundle/logs/vulnerable_attempt1_health.curl.log0.0 KBbundle/logs/vulnerable_attempt1_noauth_netsdk.headers.txt0.2 KBbundle/logs/vulnerable_attempt1_noauth_netsdk.body0.1 KBbundle/logs/vulnerable_attempt1_noauth_netsdk.curl.log0.0 KBbundle/logs/vulnerable_attempt1_wrong_netsdk.headers.txt0.2 KBbundle/logs/vulnerable_attempt1_wrong_netsdk.body0.1 KBbundle/logs/vulnerable_attempt1_wrong_netsdk.curl.log0.0 KBbundle/logs/vulnerable_attempt1_admin_empty_netsdk.headers.txt0.1 KBbundle/logs/vulnerable_attempt1_admin_empty_netsdk.body0.2 KBbundle/logs/vulnerable_attempt1_admin_empty_netsdk.curl.log0.0 KBbundle/logs/vulnerable_attempt1_admin_empty_snapshot.headers.txt0.1 KBbundle/logs/vulnerable_attempt1_admin_empty_snapshot.body0.0 KBbundle/logs/vulnerable_attempt1_admin_empty_snapshot.curl.log0.0 KBbundle/logs/vulnerable_service_attempt2.log1.9 KBbundle/logs/vulnerable_attempt2_health.headers.txt0.2 KBbundle/logs/vulnerable_attempt2_health.body0.1 KBbundle/logs/vulnerable_attempt2_health.curl.log0.0 KBbundle/logs/vulnerable_attempt2_noauth_netsdk.headers.txt0.2 KBbundle/logs/vulnerable_attempt2_noauth_netsdk.body0.1 KBbundle/logs/vulnerable_attempt2_noauth_netsdk.curl.log0.0 KBbundle/logs/vulnerable_attempt2_wrong_netsdk.headers.txt0.2 KBbundle/logs/vulnerable_attempt2_wrong_netsdk.body0.1 KBbundle/logs/vulnerable_attempt2_wrong_netsdk.curl.log0.0 KBbundle/logs/vulnerable_attempt2_admin_empty_netsdk.headers.txt0.1 KBbundle/logs/vulnerable_attempt2_admin_empty_netsdk.body0.2 KBbundle/logs/vulnerable_attempt2_admin_empty_netsdk.curl.log0.0 KBbundle/logs/vulnerable_attempt2_admin_empty_snapshot.headers.txt0.1 KBbundle/logs/vulnerable_attempt2_admin_empty_snapshot.body0.0 KBbundle/logs/vulnerable_attempt2_admin_empty_snapshot.curl.log0.0 KBbundle/logs/fixed_service_attempt1.log1.9 KBbundle/logs/fixed_attempt1_health.headers.txt0.2 KBbundle/logs/fixed_attempt1_health.body0.1 KBbundle/logs/fixed_attempt1_health.curl.log0.0 KBbundle/logs/fixed_attempt1_noauth_netsdk.headers.txt0.2 KBbundle/logs/fixed_attempt1_noauth_netsdk.body0.1 KBbundle/logs/fixed_attempt1_noauth_netsdk.curl.log0.0 KBbundle/logs/fixed_attempt1_wrong_netsdk.headers.txt0.2 KBbundle/logs/fixed_attempt1_wrong_netsdk.body0.1 KBbundle/logs/fixed_attempt1_wrong_netsdk.curl.log0.0 KBbundle/logs/fixed_attempt1_admin_empty_netsdk.headers.txt0.2 KBbundle/logs/fixed_attempt1_admin_empty_netsdk.body0.1 KBbundle/logs/fixed_attempt1_admin_empty_netsdk.curl.log0.0 KBbundle/logs/fixed_attempt1_configured_password_netsdk.headers.txt0.1 KBbundle/logs/fixed_attempt1_configured_password_netsdk.body0.2 KBbundle/logs/fixed_attempt1_configured_password_netsdk.curl.log0.0 KBbundle/logs/fixed_service_attempt2.log1.9 KBbundle/logs/fixed_attempt2_health.headers.txt0.2 KBbundle/logs/fixed_attempt2_health.body0.1 KBbundle/logs/fixed_attempt2_health.curl.log0.0 KBbundle/logs/fixed_attempt2_noauth_netsdk.headers.txt0.2 KBbundle/logs/fixed_attempt2_noauth_netsdk.body0.1 KBbundle/logs/fixed_attempt2_noauth_netsdk.curl.log0.0 KBbundle/logs/fixed_attempt2_wrong_netsdk.headers.txt0.2 KBbundle/logs/fixed_attempt2_wrong_netsdk.body0.1 KBbundle/logs/fixed_attempt2_wrong_netsdk.curl.log0.0 KBbundle/logs/fixed_attempt2_admin_empty_netsdk.headers.txt0.2 KBbundle/logs/fixed_attempt2_admin_empty_netsdk.body0.1 KBbundle/logs/fixed_attempt2_admin_empty_netsdk.curl.log0.0 KBbundle/logs/fixed_attempt2_configured_password_netsdk.headers.txt0.1 KBbundle/logs/fixed_attempt2_configured_password_netsdk.body0.2 KBbundle/logs/fixed_attempt2_configured_password_netsdk.curl.log0.0 KBbundle/vuln_variant/reproduction_steps.sh16.7 KBbundle/logs/vuln_variant/reproduction_steps.log2.7 KBbundle/vuln_variant/candidate_results.jsonl5.7 KBbundle/vuln_variant/validation_verdict.json3.1 KBbundle/vuln_variant/variant_manifest.json3.7 KBbundle/vuln_variant/rca_report.md10.3 KBbundle/vuln_variant/patch_analysis.md7.0 KBbundle/vuln_variant/source_identity.json1.4 KBbundle/vuln_variant/runtime_manifest.json7.1 KB