Replacement firmware
Beta build · 10-13-2026-r66345
Browse firmware downloadsdownload1.dd-wrt.comRouter
Linksys E2100L
Projects for this device
Replacement firmware
Replace router software with a customizable system for network controls and community packages.
How to get started
Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.
- Setup
- Firmware replacement; route varies by router
- You’ll need
- Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
- 1.0
- Retired support documentedOpen device guide
Recorded configuration: 8 MB flash; 64 MB RAM
- Device support in source
- Retired; check the documented hardware and older release resources.
- First installation
- U-Boot TFTP + serial recovery; see forum
Features & details
Check the project and hardware shown for each feature.
Device details
linksys e2100l 10 — device documentation (github.com)Device details — Source documentation (openwrt.org)
- Hardware revision
- 1.0
OpenWrt · 1.0
- Installation routes recorded
- U-Boot TFTP + serial recovery, see forum
- Recovery routes recorded
- U-Boot TFTP + serial recovery
- Availability recorded by source
- Discontinued
Hardware details
Documented hardware
linksys e2100l 10 — device documentation (github.com)Linksys E2100L — TechInfoDepot (github.com)Documented hardware — Source documentation (openwrt.org)
- Processor
- Atheros AR9130
- Hardware revision
- 1.0
- Wi-Fi chip
- Atheros AR9102
- Flash
- 8 MB
- Processor / Wi-Fi
- Atheros AR9130
- Memory
- 64 MB
- Hardware revision
- 1.0
- Wi-Fi chip
- Atheros AR9102
Technical references
Security
Saved scan
From our saved security research.
Model advisories
Selected highlightsPrioritized by known exploitation, severity, then date.
E2100L v1
Linksys Routers E/WAG/WAP/WES/WET/WRT-Series
- Affected firmware
- Through 1.0.05
- Fix
- Fix details in the linked record
Details and sources
An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to inject shell commands. This vulnerability was reported to be exploited in the wild by the "TheMoon" worm in 2014 to deploy a MIPS ELF payload, enabling arbitrary code execution on the router. Additionally, this vulnerability may affect other Linksys products to include, but not limited to, WAG/WAP/WES/WET/WRT-series router models and Wireless-N access points and routers. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC.