CVE-2001-0895: Cisco Catalyst 2900xl

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP table.

Affected products

• Cisco Catalyst 2900xl: any version
• Cisco Catalyst 2948g-l3: any version
• Cisco Catalyst 2950: any version
• Cisco Catalyst 3500xl: any version
• Cisco Catalyst 3550: any version
• Cisco Catalyst 4000: any version
• Cisco Catalyst 4908g-l3: any version
• Cisco Catalyst 5000: any version
• Cisco Catalyst 6000: any version
• Cisco Catalyst 8500: any version
• Cisco Distributed Director: any version

Published 2001-11-15. Last modified 2026-06-16.