Design/Logic Flaw

The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets...

PT-2012-5703

Name of the Vulnerable Software and Affected Versions Forescout CounterACT NAC device versions prior to 7.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the...

PT-2012-5702

Name of the Vulnerable Software and Affected Versions Forescout CounterACT NAC device versions prior to 7.0 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the a parameter in the assets/login endpoint. Recommendation...

PT-2012-5704

Name of the Vulnerable Software and Affected Versions Forescout CounterACT NAC device version 6.3.4.1 Description The issue allows remote attackers to conduct ARP poisoning attacks via crafted packets, as the device does not block ARP and ICMP traffic from unrecognized clients. Recommendations Fo...

CVE-2012-4985: Undefined Security Weakness

The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets...

CVE-2012-4982: Improper Input Validation

Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the a parameter...

CVE-2012-4983: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities on the Forescout CounterACT NAC device before 7.0 allow remote attackers to inject arbitrary web script or HTML via 1 the a parameter to assets/login or 2 the query parameter to assets/rangesearch...