CVE-2001-0895
Estado: ModificadaMedia (5)—
Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP table.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
- Puntuación base: 5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.35%
- Percentil entre todas las CVEs puntuadas: 83
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (11)
CWE
- NVD-CWE-Other
Referencias
- http://www.cisco.com/warp/public/707/IOS-arp-overwrite-vuln-pub.shtml
- http://www.kb.cert.org/vuls/id/399355
- http://www.osvdb.org/807
- http://www.securityfocus.com/bid/3547
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7547
- http://www.cisco.com/warp/public/707/IOS-arp-overwrite-vuln-pub.shtml
- http://www.kb.cert.org/vuls/id/399355
- http://www.osvdb.org/807
- http://www.securityfocus.com/bid/3547
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7547
JSON original (NVD)
Mostrar
{
"id": "CVE-2001-0895",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2001-11-15T05:00:00.000",
"references": [
{
"url": "http://www.cisco.com/warp/public/707/IOS-arp-overwrite-vuln-pub.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/399355",
"tags": [
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/807",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/3547",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7547",
"source": "cve@mitre.org"
},
{
"url": "http://www.cisco.com/warp/public/707/IOS-arp-overwrite-vuln-pub.shtml",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/399355",
"tags": [
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/807",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/3547",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7547",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP table."
}
],
"lastModified": "2026-06-16T21:55:10.683",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:catalyst_2900xl:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "608C95E6-75D1-4A04-83B4-F9785CD25F79"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_2948g-l3:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8BF525D-E813-4CB9-BE84-0B8283F2FACF"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_2950:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B4DA944-5B98-4BFB-90E9-C2A1C7731ECF"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_3500xl:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9229CAAE-1582-43DE-B727-881D0E3ABB9A"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_3550:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DA518E9-3A63-4997-AC3E-2FB0B8438B82"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_4000:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "105544F7-F57E-4B22-921C-E5EEA82B5CC4"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_4908g-l3:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83198D7C-C205-44AF-901F-6BD6D5C36244"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_5000:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38E8BD58-5E55-4F07-B115-3BE78D7B2AD6"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_6000:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B75201F-F007-4612-A3F0-ABC75C730F94"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_8500:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57BAA00D-994D-4F18-9858-7EAC3470FBC0"
},
{
"criteria": "cpe:2.3:h:cisco:distributed_director:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F61E4FE9-24E4-4360-B606-488CB1EB7278"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}