Skip to main content

JAIOTlink C492A-W6 EUVDEUVD-2026-41049

| CVE-2026-58453 CRITICAL
Use of Default Credentials (CWE-1392)
2026-07-01 VulnCheck GHSA-fg9v-4hw2-f9w8
Authentication Bypass Command Injection C492A W6 Wi Fi Ip Camera
9.3
CVSS 4.0 · Vendor: VulnCheck
Share

Severity by source

Vendor (VulnCheck) PRIMARY
9.3 CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
8.8 HIGH

Description says 'network-adjacent' so AV:A (conflicts with input AV:N); empty default password means PR:N and AC:L, with full C/I/A loss over the device.

3.1 AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
4.0 AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

1
Analysis Generated
Jul 01, 2026 - 16:50 vuln.today

DescriptionCVE.org

JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnerability that allows network-adjacent attackers to gain unauthorized access by using the default admin username with an empty password accepted by the anyka_ipc HTTP service on port 80. Attackers can authenticate with these hardcoded credentials to access camera snapshots, video streams, network configuration, and factory-level API endpoints including the SetMAC command injection surface.

AnalysisAI

Default-credential authentication bypass in JAIOTlink C492A-W6 Wi-Fi IP cameras (firmware 4.8.30.57701411) lets attackers log in to the anyka_ipc HTTP service on port 80 using the built-in admin username with an empty password, granting full access to snapshots, live video, network configuration, and factory-level API endpoints. Because the same interface exposes a SetMAC command-injection surface, this trivial access can be pivoted toward device-level code execution. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Reach camera on adjacent network
Delivery
Open anyka_ipc web service port 80
Exploit
Log in as admin with empty password
Execution
Access video, config, factory API
Persist
Abuse SetMAC command injection surface
Impact
Execute commands / persist on device
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires reaching the anyka_ipc HTTP service on TCP port 80 of a JAIOTlink C492A-W6 running firmware 4.8.30.57701411, then authenticating as the default admin account with an empty password - no other credentials, user interaction, or non-default settings are needed, since this is the shipped default state. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H, score 9.3) describes a trivially exploitable, no-authentication, high-impact flaw, and public exploit code raises practical risk further. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker on the same Wi-Fi or LAN segment as the camera opens its port-80 web interface, logs in as admin with a blank password, and instantly gains access to live video, stored snapshots, and network configuration. From there they reach the factory API and the SetMAC command-injection surface to attempt code execution on the device, turning the camera into a surveillance foothold or botnet node. …
Remediation No vendor-released patch identified at time of analysis; JAIOTlink has no published fixed firmware version in the available data. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Conduct inventory of all JAIOTlink C492A-W6 devices and confirm affected firmware versions; note that publicly available exploit code exists. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in C492A W6 Wi Fi Ip Camera

View all
CVE-2026-58452 HIGH POC
8.7 Jul 01

Authenticated remote code execution in JAIOTlink C492A-W6 Wi-Fi IP cameras (firmware 4.8.30.57701411) lets a logged-in a
CVE-2026-58454 HIGH POC
7.7 Jul 01

Authenticated remote code execution in JAIOTlink C492A-W6 Wi-Fi IP cameras (firmware 4.8.30.57701411) lets a logged-in a

Same weakness CWE-1392 – Use of Default Credentials

View all
CVE-2026-26341 CRITICAL POC
9.8
CVE-2026-26366 CRITICAL POC
9.8
CVE-2026-1803 HIGH POC
8.1
CVE-2025-6529 HIGH POC
7.4
CVE-2025-1160 MEDIUM POC
6.9
CVE-2026-42941 HIGH
8.7
CVE-2024-40113 MEDIUM POC
6.5
CVE-2026-50005 HIGH
8.3

Same technique Authentication Bypass

View all
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2025-3248 CRITICAL POC
9.8
CVE-2025-49113 CRITICAL POC
9.9
CVE-2020-5849 HIGH POC
7.5
CVE-2024-7593 CRITICAL POC
9.8

Share

EUVD-2026-41049 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy