Network Access Control Device Vulnerability in Forescout CounterACT
CVE-2012-4985
Currently unrated
What is CVE-2012-4985?
The Forescout CounterACT NAC device version 6.3.4.1 is vulnerable due to its failure to block ARP and ICMP traffic from unrecognized clients. This oversight allows malicious actors to execute ARP poisoning attacks, potentially compromising network integrity and exposing sensitive data. Attackers can send specially crafted packets to manipulate the flow of network traffic, leading to various detrimental effects, including man-in-the-middle attacks. Organizations utilizing this device should swiftly implement measures to mitigate this vulnerability to enhance their network security posture.