Deviceways

Router

Linksys E1000

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v1 · Broadcom BCM4716B0
Open hardware record
v2.0 · Broadcom BCM5357B0
Open hardware record
v2.1 · Broadcom BCM5357B0
Open hardware record
v1 · Broadcom BCM4716 Wi-Fi
Retired support documentedOpen device guide
v2.0 / v2.1 · Broadcom BCM5357B0 Wi-Fi
Retired support documentedOpen device guide
v1
Open hardware record
v2.0,v2.1 · Broadcom BCM5357
Open hardware record
Original project github.com

v1 · Broadcom BCM4716 Wi-Fi

Device support in source
Retired; check the documented hardware and older release resources.
Limitations
WiFi 2.4GHz partly
First installation
CFE TFTP + serial recovery

v2.0 / v2.1 · Broadcom BCM5357B0 Wi-Fi

Device support in source
Retired; check the documented hardware and older release resources.
Limitations
WiFi 2.4GHz
First installation
CFE TFTP + serial recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

linksys e1000 v1 — device documentation (github.com)Linksys E1000 v1 — WikiDevi (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
v1

Device details

linksys e1000 v2 — device documentation (github.com)

Hardware revision
v2.0,v2.1

Device details

Linksys E1000 v1 — TechInfoDepot (github.com)

Hardware revision
v1

Device details

Linksys E1000 v2.0 — TechInfoDepot (github.com)

Hardware revision
v2.0

Device details

Linksys E1000 v2.1 — TechInfoDepot (github.com)

Hardware revision
v2.1

Device details

Linksys E1000 v2.0 — WikiDevi (github.com)

Hardware revision
v2.0

Device details

Linksys E1000 v2.1 — WikiDevi (github.com)

Hardware revision
v2.1

OpenWrt · v1 · Broadcom BCM4716 Wi-Fi

OpenWrt · v1 · Broadcom BCM4716 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
CFE TFTP + serial recovery
Recovery routes recorded
CFE TFTP + serial recovery
Availability recorded by source
Discontinued

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
v2.0 / v2.1

OpenWrt · v2.0 / v2.1 · Broadcom BCM5357B0 Wi-Fi

OpenWrt · v2.0 / v2.1 · Broadcom BCM5357B0 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
CFE TFTP + serial recovery
Recovery routes recorded
CFE TFTP + serial recovery
Availability recorded by source
Discontinued

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 10.0 (v4.0)

E1000 v1

Linksys Routers E/WAG/WAP/WES/WET/WRT-Series

CVE-2025-34037

Affected firmware
Before 2.1.03
Fix
Fix details in the linked record
Read VulnCheck CVE record
Details and sources
Public disclosure CVE updated

An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to inject shell commands. This vulnerability was reported to be exploited in the wild by the "TheMoon" worm in 2014 to deploy a MIPS ELF payload, enabling arbitrary code execution on the router. Additionally, this vulnerability may affect other Linksys products to include, but not limited to, WAG/WAP/WES/WET/WRT-series router models and Wireless-N access points and routers. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC.

Security advisory linksys routers command injection — E1000 v1 (vulncheck.com) ↗
CVE published

CVSS 8.3 (v3.1)

E1000

Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter…

CVE-2013-3307

Affected firmware
Through 2.1.02
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.

Security advisory TWSL2013 008.txt — E1000 (web.archive.org) ↗
CVE published

CVSS 6.7 (v3.1)

Linksys E1000

There is stack-based buffer overflow vulnerability in pc_change_act function in Linksys E1000 router firmware version v.2.1.03 and before, leading to remote code execution.

CVE-2024-28283

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

There is stack-based buffer overflow vulnerability in pc_change_act function in Linksys E1000 router firmware version v.2.1.03 and before, leading to remote code execution.

Check more security advisories for this device · CVE.org