Cisco Catalyst 2900xl vulnerabilities

2 CVEs affecting Cisco Catalyst 2900xl, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-3918, published 2014-04-23.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2001-0895, published 2001-11-15. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC…
• CVE-2012-3918, published 2014-04-23. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cisco IOS before 15.3(1)T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service (serial-interface outage) via…