CVE-2012-4985: Forescout Counteract

Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days.

The Forescout CounterACT NAC device 6.3.4.1 does not block ARP and ICMP traffic from unrecognized clients, which allows remote attackers to conduct ARP poisoning attacks via crafted packets.

Affected products

• Forescout Counteract: version 6.3.4.10 only

Published 2012-12-05. Last modified 2026-06-16.