Deviceways

Router

Linksys E8450

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
MediaTek MT7622BV / MediaTek MT7915E Wi-Fi
Open device guide Release listed · 25.12.5
MediaTek MT7915AN / MediaTek MT7975AN Wi-Fi
Open hardware record
Hardware revision not specified
Open hardware record Release listed · 25.12.5
Original project github.com
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

Linksys E8450 — TechInfoDepot (github.com)

Hardware revision
v1

Device details

Linksys E8450 — WikiDevi (github.com)

Hardware revision
v1<br>(Belkin RT3200)

OpenWrt · MediaTek MT7622BV / MediaTek MT7915E Wi-Fi

OpenWrt · MediaTek MT7622BV / MediaTek MT7915E Wi-Fi — Source documentation (openwrt.org)

Availability recorded by source
Available 2023

Hardware details

Technical references

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 8.8 (v3.1)

Linksys E8450

Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via the field id_email_check_btn.

CVE-2024-57542

Affected firmware
E8450: v1.2.00.360516 was discovered to
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via the field id_email_check_btn.

CVE published

CVSS 8.7 (v4.0)

E8450

Linksys E8450 HTTP POST Request portal.cgi set_device_language buffer overflow

CVE-2025-6751

Affected firmware
1.2.00.360516
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability, which was classified as critical, was found in Linksys E8450 up to 1.2.00.360516. This affects the function set_device_language of the file portal.cgi of the component HTTP POST Request Handler. The manipulation of the argument dut_language leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

VDB-314049 | Linksys E8450 HTTP POST Request portal.cgi set_device_language buffer overflow — E8450 (vuldb.com) ↗VDB-314049 | CTI Indicators (IOB, IOC, IOA) — E8450 (vuldb.com) ↗Submit #598217 | Linksys Holdings, Inc. E8450 <=Ver. 1.2.00.360516 Buffer Overflow — E8450 (vuldb.com) ↗
CVE published

CVSS 8.2 (v3.1)

Linksys E8450

Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via userEmail.

CVE-2024-57539

Affected firmware
E8450: v1.2.00.360516 was discovered to
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via userEmail.

CVE published

CVSS 8.0 (v3.1)

Linksys E8450

Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via wizard_status.

CVE-2024-57536

Affected firmware
E8450: v1.2.00.360516 was discovered to
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via wizard_status.

CVE published

CVSS 6.5 (v3.1)

Linksys E8450

Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability

CVE-2024-57540

Affected firmware
E8450: v1.2.00.360516 was discovered to
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (action) is copied to the stack without length verification.

Check more security advisories for this device · CVE.org