CVE-2024-29862 - The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway-bridge before 4.0.11 wrongly accepts certain TCP packets when a connection is not in the ESTABLISHED state

Back Back to CVE browser

HIGH

The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway-bridge before 4.0.11 wrongly accepts certain TCP packets when a connection is not in the ESTABLISHED state

Published Mar 21, 2024

7.5

HIGH

CVSS 3.1

EPSS 0.65%

Description

The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway-bridge before 4.0.11 wrongly accepts certain TCP packets when a connection is not in the ESTABLISHED state.

Affected products

Vendor Chirpstack Product Gateway-Bridge Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <4.0.11
Vendor Chirpstack Product Mqtt-Forwarder Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <4.2.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Chirpstack

Gateway-Bridge

n/a

Version	Status	Constraints
0	affected	<4.0.11

Chirpstack

Mqtt-Forwarder

n/a

Version	Status	Constraints
0	affected	<4.2.1

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-26853		Advisory
https://github.com/chirpstack/chirpstack-gateway-bridge/commit/0c1e80c9fa9f5d093ff62903caedad86ec4640b6		Patch
https://github.com/chirpstack/chirpstack-mqtt-forwarder/commit/4fa9e6eaaec8c3ca49ebfbf6317572671f17700f		Patch