Firewall Bypass

github.com/chirpstack/chirpstack-gateway-bridge/ is vulnerable to Firewall Bypass. The vulnerability is due to the firewall accepting specific TCP packets outside the ESTABLISHED connection state...

CVE-2024-29862

The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder (versions before 4.2.1 ) and chirpstack-gateway-bridge (versions before 4.0.11 ) is vulnerable to a firewall bypass . The root cause is that the firewall incorrectly accepts specific TCP packets when a connection is not in the ESTABLISH...

CVE-2024-29862: Undefined Security Weakness

The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway-bridge before 4.0.11 wrongly accepts certain TCP packets when a connection is not in the ESTABLISHED state...