EA9400 Windows 11 & Ubuntu 25.10

[ReallyLuvMDDrivers]

What router did you use?

EA9400

Did you downgrade the firmware or stay on a older firmware?

Downgraded the firmware

If you downgraded or used a older firmware, what was the original firmware (optional), how did you downgrade (optional if you stayed on old firmware but didn't downgrade, if you downgraded you must answer this), and what older firmware version did you use to run the exploit (required)?

First of all, I (a nobody) truly appreciate the effort and end result that went into this by you and anyone else that assisted you. Thank you.
I know my router isnt a new router on the lost but wanted to provide my lessons learned to help anyway I can.

I have 2 9400v1 (US) that was on fw 1.0.3.175250 and I wanted to try the processes provided. Neither method 1 or 2 worked from my 1 Windows 11 laptop. I also tried (on the router side) using admin'ncat..... since windows uses ncat as the cmd, just to eliminate that being a issue. I also did this for 1.0.3.181249 & 1.0.2.174288 with no joy.
Then, I was able to get my 3yr old asleep and move to my *nix machines to continue trying. Method 1 did not work either. But, method 2 worked 1st go on the 1.0.2.
I will be trying this on my EA6500, EA8300, EA7500v2, E3000, WRT54GSv4 & WRT3200 starting today for shitz. I will verify with the list and definitely add if successful & not on it.
Thank you.
V/r,
Chuck

Downgrade Methods

• Yes, the README methods worked
• No, I had to use a different method (describe below)

If you downgraded using a method that isn't on the README, describe how you downgraded below:

No response

What region is your router?

US

(optional) If you have any other useful info, add it here

No response

[SomeTechyGuy]

FYI this exploit should probably work on the list of devices shown by IOActive because I think they found the exploit but I don't know for sure. One of the minimum requirements is for the router to have JNAP (which was starting to be used in 2012), and sometimes even with the RCE bug, you won't get a shell, because my EA9400 has the nc binary, but the other routers may not have nc, it would be maybe telnet or something else instead.

[SomeTechyGuy]

I should probably mention that the EA9400/EA9500 firmware doesn't have ncat, you need to run nc on the router using the password exploit, and on the computer shell you should be able to use ncat (just make sure to start the ncat listener on your PC first, then use the router RCE with the nc command to get the shell)