Deviceways

Router

Linksys EA6500

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v2 · Broadcom BCM4708A0
Open hardware record
v2 · Broadcom BCM4708A0
Get OpenWrt firmware Release listed · 25.12.6
v2
Open hardware record
Original project github.com
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

linksys ea6500 v2 — device documentation (github.com)Linksys EA6500 v2 — WikiDevi (github.com)Device details — v2 — Source documentation (openwrt.org)

Hardware revision
v2

Device details

Linksys EA6500 v1 — TechInfoDepot (github.com)

Hardware revision
v1

Device details

Linksys EA6500 v2 — TechInfoDepot (github.com)

Hardware revision
v2

Device details

Linksys EA6500 v1 — WikiDevi (github.com)

Hardware revision
v1

OpenWrt · v2 · Broadcom BCM4708A0

OpenWrt · v2 · Broadcom BCM4708A0 — v2 — Source documentation (openwrt.org)

Availability recorded by source
Discontinued 2014

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

Linksys EA6500

Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share.

CVE-2013-4658

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share.

CVE published

Linksys EA6500

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build…

CVE-2014-8244

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read certcc CVE record
Details and sources
Public disclosure CVE updated

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain sensitive information or modify data via a JNAP action in a JNAP/ HTTP request.

CVE published

Linksys EA6500

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build…

CVE-2014-8243

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read certcc CVE record
Details and sources
Public disclosure CVE updated

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain the administrator's MD5 password hash via a direct request for the /.htpasswd URI.

CVE published

Linksys EA6500

Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information (clients and router configuration) via a…

CVE-2013-3066

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information (clients and router configuration) via a request to /JNAP/.

CVE published

Linksys EA6500

Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script…

CVE-2013-3065

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section.

Check more security advisories for this device · CVE.org