CVEvulnerability
CVE-2012-4985
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-12-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets.
Affected configurations
• forescout counteract 6.3.4.10
Related
Weakness · not in database (1)
References
- http://osvdb.org/87895 osvdb.org
- http://www.reactionpenetrationtesting.co.uk/forescout-nac-icmp-arp.html www.reactionpenetrationtesting.co.uk
- http://www.securityfocus.com/bid/56689 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80284 exchange.xforce.ibmcloud.com
- http://osvdb.org/87895 osvdb.org
- http://www.reactionpenetrationtesting.co.uk/forescout-nac-icmp-arp.html www.reactionpenetrationtesting.co.uk
- http://www.securityfocus.com/bid/56689 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80284 exchange.xforce.ibmcloud.com