CVE-2001-0895

Name: CVE-2001-0895
Creator: NVD / NIST
Published: 2001-11-15T05:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.35%

Last modified Jun 16, 2026

CVE-2001-0895 is a vulnerability of currently unknown severity. Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP table.. EPSS estimates a 2.35% chance of exploitation in the next 30 days.

Description

Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP table.

Metrics

EPSS Probability

2.35%

81.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Cisco	Catalyst 2900xl	All versions
Cisco	Catalyst 2948g-L3	All versions
Cisco	Catalyst 2950	All versions
Cisco	Catalyst 3500xl	All versions
Cisco	Catalyst 3550	All versions
Cisco	Catalyst 4000	All versions
Cisco	Catalyst 4908g-L3	All versions
Cisco	Catalyst 5000	All versions
Cisco	Catalyst 6000	All versions
Cisco	Catalyst 8500	All versions
Cisco	Distributed Director	All versions

References

http://www.cisco.com/warp/public/707/IOS-arp-overwrite-vuln-pub.shtmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/399355US Government Resource
http://www.osvdb.org/807
http://www.securityfocus.com/bid/3547
https://exchange.xforce.ibmcloud.com/vulnerabilities/7547
http://www.cisco.com/warp/public/707/IOS-arp-overwrite-vuln-pub.shtmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/399355US Government Resource
http://www.osvdb.org/807
http://www.securityfocus.com/bid/3547
https://exchange.xforce.ibmcloud.com/vulnerabilities/7547

Timeline

Published: Nov 15, 2001
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2001-0895?

How severe is CVE-2001-0895?

Severity scoring for CVE-2001-0895 is pending analysis. The EPSS model estimates a 2.35% probability of exploitation in the next 30 days.

How do I fix CVE-2001-0895?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2001-0895?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST