CVE-2024-29862

The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder (before 4.2.1 ) and chirpstack-gateway-bridge (before 4.0.11 ) is vulnerable to a Firewall Bypass . The root cause is that the firewall incorrectly accepts certain TCP packets even when a connection is not in the ESTABLISHED state. Impa...