Deviceways

Router

Linksys EA4500

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v1 · Marvell 88W8366 Wi-Fi
Processor: Marvell 88F6282Open hardware record
v2 · Marvell 88W8063 / Marvell 88W8366 Wi-Fi
Processor: Marvell 88F6282 · Wi-Fi chip: Marvell 88W8063 · Wi-Fi chip: Marvell 88W8366Open hardware record
v3 · Atheros AR9580 Wi-Fi
Processor: Qualcomm Atheros QCA9558Open hardware record Release listed · 25.12.5
v1 · 2x Marvell 88W8366 Wi-Fi
Get OpenWrt firmware Release listed · 25.12.6
v2 · 2x Marvell 88W8366 Wi-Fi
Get OpenWrt firmware Release listed · 25.12.6
v3 · Atheros AR9580 / Qualcomm Atheros QCA9558 Wi-Fi
Get OpenWrt firmware Release listed · 25.12.6
v3
Get firmware Release listed · 25.12.5
v1
Open hardware record
v2
Open hardware record
v3 · Qualcomm Atheros QCA9558
Open hardware record Release listed · 25.12.5
Original project github.com

v1 · 2x Marvell 88W8366 Wi-Fi

Limitations
WPA3
First installation
GUI OEM

v2 · 2x Marvell 88W8366 Wi-Fi

Limitations
WPA3
First installation
see forum

v3 · Atheros AR9580 / Qualcomm Atheros QCA9558 Wi-Fi

Limitations
dual firmware layout
First installation
GUI OEM; U-Boot TFTP + serial recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

linksys ea4500 v1 — device documentation (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
v1

Device details

linksys ea4500 v2 — device documentation (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
v2

Device details

linksys ea4500 v3 — device documentation (github.com)Linksys EA4500 v3 — WikiDevi (github.com)Device details — v3 — Source documentation (openwrt.org)

Hardware revision
v3

Device details

Linksys EA4500 v1 (Cisco) — TechInfoDepot (github.com)

Hardware revision
v1

Device details

Linksys EA4500 v2 — TechInfoDepot (github.com)

Hardware revision
v2

Device details

Linksys EA4500 v3 — TechInfoDepot (github.com)

Hardware revision
v3

Device details

Linksys EA4500 v1 (Cisco) — WikiDevi (github.com)

Hardware revision
v1 (Cisco)

OpenWrt · v1 · 2x Marvell 88W8366 Wi-Fi

OpenWrt · v1 · 2x Marvell 88W8366 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM
Availability recorded by source
Discontinued 2014

OpenWrt · v2 · 2x Marvell 88W8366 Wi-Fi

OpenWrt · v2 · 2x Marvell 88W8366 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
see forum
Availability recorded by source
Discontinued

OpenWrt · v3 · Atheros AR9580 / Qualcomm Atheros QCA9558 Wi-Fi

OpenWrt · v3 · Atheros AR9580 / Qualcomm Atheros QCA9558 Wi-Fi — v3 — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM, U-Boot TFTP + serial recovery
Recovery routes recorded
U-Boot TFTP recovery
Availability recorded by source
Discontinued 2023

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

Linksys EA4500

Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access

CVE-2013-5122

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access

CVE-2013-5122 record (packetstormsecurity.com) ↗
CVE published

Linksys EA4500

Cross-Site Request Forgery (CSRF) exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demonstrated by a request to apply.cgi to disable SIP.

CVE-2017-10677

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

Cross-Site Request Forgery (CSRF) exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demonstrated by a request to apply.cgi to disable SIP.

CVE published

Linksys EA4500

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build…

CVE-2014-8244

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read certcc CVE record
Details and sources
Public disclosure CVE updated

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain sensitive information or modify data via a JNAP action in a JNAP/ HTTP request.

CVE published

Linksys EA4500

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build…

CVE-2014-8243

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read certcc CVE record
Details and sources
Public disclosure CVE updated

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain the administrator's MD5 password hash via a direct request for the /.htpasswd URI.

Check more security advisories for this device · CVE.org