Lucene search
HistoryDec 05, 2012 - 11:57 a.m.
CVE-2012-4985
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0.005
Percentile
75.3%
The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets.
Affected configurations
Node
forescoutcounteractMatch6.3.4.10
| Vendor | Product | Version | CPE |
|---|---|---|---|
| forescout | counteract | 6.3.4.10 | cpe:2.3:a:forescout:counteract:6.3.4.10:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2012-4985
2012-12-05 11:00:00
prion
prion
Design/Logic Flaw
2012-12-05 11:57:00
cve
cve
CVE-2012-4985
2012-12-05 11:57:15
securityvulns
securityvulns
Forescout NAC multiple vulnerabilities
2012-12-03 00:00:00
Forescout NAC multiple security vulnerabilities
2012-12-10 00:00:00
Forescout NAC (Network Access Control) multiple vulnerabilities
2012-12-10 00:00:00
zdt
zdt
Forescout NAC 6.3.4.1 XSS / Redirection / Filter Vulnerabilities
2012-11-27 00:00:00
packetstorm
packetstorm
Forescout NAC 6.3.4.1 XSS / Redirection / Filter
2012-11-27 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0.005
Percentile
75.3%
Related for NVD:CVE-2012-4985