CVE-2012-4985 The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets.
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| forescout counteract | = 6.3.4.10 | No fix listed |
References
- 87895 vdb-entry
- www.reactionpenetrationtesting.co.uk
- 56689 vdb-entry
- forescout-security-bypass(80284) vdb-entry