Deviceways

Router

Linksys E1500

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

Hardwarev1

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v1
v1
Retired support documented
Open hardware recordopenwrt.org
Original project github.com

Recorded configuration: 8 MB flash; 32 MB RAM

Device support in source
Retired; check the documented hardware and older release resources.
Limitations
WiFi 2.4GHz
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

linksys e1500 v1 — device documentation (github.com)Device details — v1 — Source documentation (openwrt.org)

Hardware revision
v1

OpenWrt · v1

OpenWrt · v1 — v1 — Source documentation (openwrt.org)

Availability recorded by source
Discontinued 2015

Hardware details

Technical references

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 10.0 (v4.0)

E1500 v1

Linksys Routers E/WAG/WAP/WES/WET/WRT-Series

CVE-2025-34037

Affected firmware
Before 1.0.06
Fix
Fix details in the linked record
Read VulnCheck CVE record
Details and sources
Public disclosure CVE updated

An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to inject shell commands. This vulnerability was reported to be exploited in the wild by the "TheMoon" worm in 2014 to deploy a MIPS ELF payload, enabling arbitrary code execution on the router. Additionally, this vulnerability may affect other Linksys products to include, but not limited to, WAG/WAP/WES/WET/WRT-series router models and Wireless-N access points and routers. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC.

Security advisory linksys routers command injection — E1500 v1 (vulncheck.com) ↗
CVE published

CVSS 8.0 (v3.1)

Linksys E1500

A Command Injection vulnerability exists in the do_upgrade_post function of the httpd binary in Linksys E1500 v1.0.06.001

CVE-2024-42633

Affected firmware
E1500: v1.0.06.001. As a result
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

A Command Injection vulnerability exists in the do_upgrade_post function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges.

CVE published

CVSS 6.9 (v4.0)

E1500

Linksys Routers apply.cgi Path Traversal

CVE-2013-10062

Affected firmware
1.0.00 1.0.04 1.0.05
Fix
Fix details in the linked record
Read VulnCheck CVE record
Details and sources
Public disclosure CVE updated

A directory traversal vulnerability exists in Linksys router's web interface (tested on the E1500 model firmware versions 1.0.00, 1.0.04, and 1.0.05), specifically in the /apply.cgi endpoint. Authenticated attackers can exploit the next_page POST parameter to access arbitrary files outside the intended web root by injecting traversal sequences. This allows exposure of sensitive system files and configuration data.

Security advisory linksys legacy routers path traversal — E1500 (vulncheck.com) ↗
Check more security advisories for this device · CVE.org