Vulnerability in Forescout Counteract

CVE-2012-4985

The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets.

EPSS: 0.017 (75.1th percentile) — read the EPSS interpretation.

Affected products

Forescout Counteract — versions 6.3.4.10
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)