Collected research

Linskys E420 Authentication Bypass Disclosure

wtf.ninja

phrag · phra.gs

A Linksys E4200 v2 running firmware 2.0.37 serves the same administration interface on TCP port 8083 with HTTP authentication skipped entirely, so anyone who can reach the device gets full admin control. The firmware updater also wrongly reports the shipped version as current, leaving owners unaware that a fix exists.

Record

Document

wtf.ninja

Researcher

phrag

Published by

phra.gs

Topic

Identity

In the archive

• Collected in the 2014 research round

Tags

• auth-bypass
• privilege-escalation
• cve
• http
• case-study
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of phrag, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 11 August 2026.