← Vulnerability feed

Vulnerability record · CVE-2001-0895 · published 15 November 2001

CVE-2001-0895: Cisco catalyst 2900xl vulnerability

Cisco · Catalyst 2900xl

Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP table.

5.0 CVSS 2.0 Medium EPSS 2.4% · top 17.0%
5.0CVSS 2.0 base score
2.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
11Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP table.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

11 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.cisco.com/warp/public/707/IOS-arp-overwrite-vuln-pub.shtml PatchVendor Advisory
http://www.kb.cert.org/vuls/id/399355 US Government Resource
http://www.osvdb.org/807
http://www.securityfocus.com/bid/3547
https://exchange.xforce.ibmcloud.com/vulnerabilities/7547
http://www.cisco.com/warp/public/707/IOS-arp-overwrite-vuln-pub.shtml PatchVendor Advisory
http://www.kb.cert.org/vuls/id/399355 US Government Resource
http://www.osvdb.org/807
http://www.securityfocus.com/bid/3547
https://exchange.xforce.ibmcloud.com/vulnerabilities/7547

Track CVE-2001-0895 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2005-4258Cisco catalyst vulnerabilityUnspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and dest…EPSS 2.1%5.0CVE-2004-0551Cisco catos vulnerabilityCisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of se…EPSS 3.1%4.3CVE-2012-3918Cisco ios vulnerabilityCisco IOS before 15.3(1)T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a den…EPSS 1.1%

Source: NIST National Vulnerability Database (record CVE-2001-0895), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.