CVE-2012-4985

The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2012-12-05

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Counteract (Forescout)

References

• http://osvdb.org/87895
• http://www.reactionpenetrationtesting.co.uk/forescout-nac-icmp-arp.html
• http://www.securityfocus.com/bid/56689
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80284