CVE-2024-29862

The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway-bridge before 4.0.11 wrongly accepts certain TCP packets when a connection is not in the ESTABLISHED state...

CVE-2024-29862

The CVE describes a logic flaw in the Kerlink firewall used by ChirpStack components: the forwarder (chirpstack-mqtt-forwarder) and the gateway bridge (chirpstack-gateway-bridge) may incorrectly accept certain TCP packets when the TCP connection is not in the ESTABLISHED state. Affected versions ...