High severity7.5NVD Advisory· Published Mar 21, 2024· Updated Jun 17, 2026

CVE-2024-29862

Description

The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway-bridge before 4.0.11 wrongly accepts certain TCP packets when a connection is not in the ESTABLISHED state.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Kerlink/chirpstack-mqtt-forwarderdescription
ChirpStack/chirpstack-mqtt-forwarderllm-fuzzy
Range: <4.2.1
ChirpStack/chirpstack-gateway-bridgellm-fuzzy
Range: <4.0.11

Patches

Vulnerability mechanics

References

github.com/chirpstack/chirpstack-gateway-bridge/commit/0c1e80c9fa9f5d093ff62903caedad86ec4640b6nvdPatch
github.com/chirpstack/chirpstack-mqtt-forwarder/commit/4fa9e6eaaec8c3ca49ebfbf6317572671f17700fnvdPatch

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000