Firewall Bypass

github.com/chirpstack/chirpstack-gateway-bridge/ is vulnerable to Firewall Bypass. The vulnerability is due to the firewall accepting specific TCP packets outside the ESTABLISHED connection state...

CVE-2024-29862

The CVE describes a logic flaw in the Kerlink firewall used by ChirpStack components: the forwarder (chirpstack-mqtt-forwarder) and the gateway bridge (chirpstack-gateway-bridge) may incorrectly accept certain TCP packets when the TCP connection is not in the ESTABLISHED state. Affected versions ...