Replacement firmware
- v1 · 512 MB memory
- Memory: 512 MBBrowse firmware downloads Beta build · 10-13-2026-r66345
- v2 · 1024 MB memory
- Memory: 1024 MBBrowse firmware downloads Beta build · 10-13-2026-r66345
Router
Linksys MX4200
Projects for this device
Replacement firmware
Replace router software with a customizable system for network controls and community packages.
How to get started
Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.
- Setup
- Firmware replacement; route varies by router
- You’ll need
- Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
- v1 · 512 MB memory
- Memory: 512 MBGet OpenWrt firmware Release listed · 25.12.6Open device guide Release listed · 25.12.5
- v2 · 1024 MB memory
- Memory: 1024 MBGet OpenWrt firmware Release listed · 25.12.6Open device guide Release listed · 25.12.5
- V1
- Open hardware record Release listed · 25.12.5
- Hardware revision not specified
- Open hardware record
- V2
- Open hardware record Release listed · 25.12.5
v1 · 512 MB memory
- Limitations
- WiFi-6 160Mhz Channel
- First installation
- GUI OEM
v2 · 1024 MB memory
- Limitations
- WiFi-6 160Mhz Channel
Features & details
Check the project and hardware shown for each feature.
Device details
linksys mx4200 v1 and v2 — device documentation (github.com)
- Hardware revision
- V1
Device details
- Hardware revision
- V2
Device details
- Hardware revision
- v1
OpenWrt · v1 · 512 MB memory
OpenWrt · v1 · 512 MB memory — v2 — Source documentation (openwrt.org)
- Installation routes recorded
- GUI OEM
- Recovery routes recorded
- U-Boot TFTP recovery
- Availability recorded by source
- Available 2024
Device details
- Hardware revision
- v2
OpenWrt · v2 · 1024 MB memory
OpenWrt · v2 · 1024 MB memory — v2 — Source documentation (openwrt.org)
- Recovery routes recorded
- U-Boot TFTP + serial recovery
- Availability recorded by source
- Available 2024
Hardware differences
v1 · 512 MB memory
v1 · 512 MB memory — v2 — Source documentation (openwrt.org)
- Memory
- 512 MB
v2 · 1024 MB memory
v2 · 1024 MB memory — v2 — Source documentation (openwrt.org)
- Memory
- 1024 MB
Technical references
Security
Saved scan
From our saved security research.
Model advisories
Selected highlightsPrioritized by known exploitation, severity, then date.
MX4200
Missing neutralization in Linksys MR9600, Linksys MX4200
- Affected firmware
- 1.0.13.210200
- Fix
- Fix details in the linked record
Details and sources
Due to missing neutralization of special elements, OS commands can be injected via the update functionality of a TLS-SRP connection, which is normally used for configuring devices inside the mesh network. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.
MX4200
Missing neutralization in Linksys MR9600, Linksys MX4200
- Affected firmware
- 1.0.13.210200
- Fix
- Fix details in the linked record
Details and sources
Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root user. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.
MX4200
Missing authentication in Linksys MR9600, Linksys MX4200
- Affected firmware
- 1.0.13.210200
- Fix
- Fix details in the linked record
Details and sources
Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connection. This can be used to inject known credentials into the database that can be utilized to successfully complete the handshake and use the protected service. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.
MX4200
Improper verification in Linksys MR9600, Linksys MX4200
- Affected firmware
- 1.0.13.210200
- Fix
- Fix details in the linked record
Details and sources
Due to an improperly configured firewall rule, the router will accept any connection on the WAN port with the source port 5222, exposing all services which are normally only accessible through the local network. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.
MX4200
Path Traversal vulnerability in Linksys MR9600, Linksys MX4200
- Affected firmware
- 1.0.13.210200
- Fix
- Fix details in the linked record
Details and sources
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys MX4200 allows that contents of a USB drive partition can be mounted in an arbitrary location of the file system. This may result in the execution of shell scripts in the context of a root user.This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.