← Back

Chirpstack

chirpstack

2 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Network Server
network_server
1 CVE
Gateway Bridge
gateway_bridge
1 CVE
Mqtt Forwarder
mqtt_forwarder
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-29862
1Chirpstack
2Gateway Bridge
Mqtt Forwarder
Jun 17, 2026
Mar 21, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway-bridge before 4.0.11 wrongly accepts certain TCP packets when a connection is not in the ESTABLISHED state.
CVE-2020-28349
1Chirpstack
1Network Server
Jun 17, 2026
Nov 9, 2020
N/A· v4
6.5 MEDIUM· v3
6.8 MEDIUM· v2
An inaccurate frame deduplication process in ChirpStack Network Server 3.9.0 allows a malicious gateway to perform uplink Denial of Service via malformed frequency attributes in CollectAndCallOnceCollect in internal/upli...Show more
An inaccurate frame deduplication process in ChirpStack Network Server 3.9.0 allows a malicious gateway to perform uplink Denial of Service via malformed frequency attributes in CollectAndCallOnceCollect in internal/uplink/collect.go. NOTE: the vendor's position is that there are no "guarantees that allowing untrusted LoRa gateways to the network should still result in a secure network.Show less