CVE-2024-29862
EUVD-2024-2685321.03.2024, 04:15
The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway-bridge before 4.0.11 wrongly accepts certain TCP packets when a connection is not in the ESTABLISHED state.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| chirpstack | gateway_bridge | 𝑥 < 4.0.11 |
| chirpstack | mqtt_forwarder | 𝑥 < 4.2.1 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| chirpstack | gateway-bridge | 𝑥 < 4.0.11 | ADP |
| chirpstack | mqtt-forwarder | 𝑥 < 4.2.1 | ADP |
References