Router

Linksys MR8300

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
Qualcomm Atheros IPQ4019 / Qualcomm Atheros QCA9888 Wi-Fi
Get OpenWrt firmware Release listed · 25.12.6
Hardware revision not specified
Get firmware Release listed · 25.12.5
v1,v1.1; Qualcomm Atheros QCA9886 Wi-Fi
Open hardware record

Recorded configuration: 256NAND MB flash; 512 MB RAM

Limitations
Bluetooth
First installation
GUI OEM
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

linksys mr8300 — device documentation (github.com)

Hardware revision
v1,v1.1

Device details

Linksys MR8300 — TechInfoDepot (github.com)

Hardware revision
v1

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
v1 / v1.1

OpenWrt · Qualcomm Atheros IPQ4019 / Qualcomm Atheros QCA9888 Wi-Fi

OpenWrt · Qualcomm Atheros IPQ4019 / Qualcomm Atheros QCA9888 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM
Availability recorded by source
Available 2023

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVSS 8.2 (v3.1)

MR8300 Router

Command injection vulnerability in Linksys MR8300 router while Registration to DDNS Service. By specifying username and password, an attacker connected to the router's web interface can…

CVE-2022-38132

Affected firmware
Firmware 1.0
Manufacturer fix listed in
1
Read Cybellum CVE record
Details and sources

Upgrade to firmware version 1,1 is available here: https://www.linksys.com/support-article?articleNum=293921

Command injection vulnerability in Linksys MR8300 router while Registration to DDNS Service. By specifying username and password, an attacker connected to the router's web interface can execute arbitrary OS commands. The username and password fields are not sanitized correctly and are used as URL construction arguments, allowing URL redirection to an arbitrary server, downloading an arbitrary script file, and eventually executing the file in the device. This issue affects: Linksys MR8300 Router 1.0.

Check more security advisories for this device · CVE.org