VYPR
← All advisories
High severity7.5NVD Advisory· Published Mar 21, 2024· Updated Jun 17, 2026

CVE-2024-29862

CVE-2024-29862

Description

The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway-bridge before 4.0.11 wrongly accepts certain TCP packets when a connection is not in the ESTABLISHED state.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • ChirpStack/Gateway Bridge2 versions
    cpe:2.3:a:chirpstack:gateway_bridge:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:chirpstack:gateway_bridge:*:*:*:*:*:*:*:*range: <4.0.11
    • (no CPE)range: <4.0.11
  • ChirpStack/Mqtt Forwarder2 versions
    cpe:2.3:a:chirpstack:mqtt_forwarder:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:chirpstack:mqtt_forwarder:*:*:*:*:*:*:*:*range: <4.2.1
    • (no CPE)range: <4.2.1
  • Kerlink/chirpstack-mqtt-forwarderdescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.