CVE-2012-4985

Description

The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/80284

http://www.securityfocus.com/bid/56689

http://www.reactionpenetrationtesting.co.uk/forescout-nac-icmp-arp.html

http://osvdb.org/87895

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3