Unscored severity · published Dec 5, 2012
CVE-2012-4985
The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via…
–
CVSS
1.7%
EPSS
No
On KEV
Description
The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Counteract · Forescout
6.3.4.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4985
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4985
osvdb.org
http://osvdb.org/87895
www.reactionpenetrationtesting.co.uk
http://www.reactionpenetrationtesting.co.uk/forescout-nac-icmp-arp.html
www.securityfocus.com
http://www.securityfocus.com/bid/56689
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/80284
More from Counteract
7.8
CVE-2021-28098
An issue was discovered in Forescout CounterACT before 8.1.4
–
CVE-2012-4983
Multiple cross-site scripting (XSS) vulnerabilities on the Forescout CounterACT NAC device before 7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the a…
–
CVE-2012-4982
Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing…
–
CVE-2012-1825
Multiple cross-site scripting (XSS) vulnerabilities in the status program on the ForeScout CounterACT appliance with software 6.3.3.2 through 6.3.4.10 allow remote attackers to…