CVE-2012-4985

The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets.

Date published : 2012-12-05

http://www.securityfocus.com/bid/56689

http://www.reactionpenetrationtesting.co.uk/forescout-nac-icmp-arp.html