PT-2012-5704 · Forescout · Forescout Counteract

Publicado 2012-12-05 · Atualizado 2017-08-29 · CVE-2012-4985

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Forescout CounterACT NAC device version 6.3.4.1

Description The issue allows remote attackers to conduct ARP poisoning attacks via crafted packets, as the device does not block ARP and ICMP traffic from unrecognized clients.

Recommendations For version 6.3.4.1, consider configuring the device to block ARP and ICMP traffic from unrecognized clients as a temporary workaround until a patch is available. Restrict access to the network to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-4985

Produtos afetados

Forescout Counteract

Referências · 5

• http://securityfocus.com/bid/56689 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80284 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4985 · Nota de Segurança
• http://osvdb.org/87895 · Nota
• http://reactionpenetrationtesting.co.uk/forescout-nac-icmp-arp.html · Nota