CVE-2012-4985

NONE

Published Dec 5, 201213y ago · Modified Jun 16, 20262w ago

Published Dec 5, 2012 13y ago

Last Modified Jun 16, 2026 2w ago

Description

The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets.

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-264

Affected Products 1

Vendor	Product	Version	Range
forescout	counteract	6.3.4.10	any

References 4

osvdb.org http://osvdb.org/87895
reactionpenetrationtesting.co.uk http://www.reactionpenetrationtesting.co.uk/forescout-nac-icmp-arp.html
securityfocus.com http://www.securityfocus.com/bid/56689
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/80284

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.