CVE-2001-0041
CVE-2001-0041 is a high-severity vulnerability in Cisco Catos with a CVSS 2.0 base score of 7.8. Its EPSS exploit-prediction score of 12% places it in the 96th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-399.
Key facts
- Severity: High (CVSS 2.0 base score 7.8)
- EPSS exploit prediction: 12% (96th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-399
- Affected product: Cisco Catos
- Published:
- Last modified:
Description
Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet authentication attempts.
Frequently asked questions
- What is CVE-2001-0041?
- Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet authentication attempts.
- How severe is CVE-2001-0041?
- CVE-2001-0041 has a CVSS 2.0 base score of 7.8, rated high severity.
- Is CVE-2001-0041 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 12% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2001-0041?
- CVE-2001-0041 primarily affects Cisco Catos. In total, 40 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2001-0041?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2001-0041 published?
- CVE-2001-0041 was published on 2001-02-16 and last updated on 2026-06-16.
References
- http://www.cisco.com/warp/public/707/catalyst-memleak-pub.shtml
- http://www.osvdb.org/801
- http://www.securityfocus.com/bid/2072
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5656
Affected products (40)
- cpe:2.3:o:cisco:catos:4.5\(2\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:4.5\(3\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:4.5\(4\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:4.5\(5\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:4.5\(6\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:4.5\(7\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:4.5\(8\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:4.5\(9\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.1\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.1\(1a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.1\(2a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.2:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.2\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.2\(1a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.2\(2\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.2\(3\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.2\(4\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.2\(5\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.2\(6\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.2\(7\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.3\(1\)csx:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.3\(1a\)csx:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.3\(2\)csx:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.3\(3\)csx:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.3\(4\)csx:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.3\(5\)csx:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.3\(5a\)csx:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.3\(6\)csx:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.4:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.4\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.4\(2\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.4\(3\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.4\(4\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.5:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.5\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.5\(2\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.5\(3\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.5\(4\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.5\(4a\):*:*:*:*:*:*:*
More vulnerabilities in Cisco Catos
- CVE-2003-0216 — Critical (CVSS 9.3): Unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the…
- CVE-2006-4775 — High (CVSS 7.8): The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of…
- CVE-2005-4258 — High (CVSS 7.8): Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet…
- CVE-2008-4963 — High (CVSS 7.1): Unspecified vulnerability in the VLAN Trunking Protocol (VTP) implementation on Cisco IOS and CatOS, when the VTP…
- CVE-2007-5651 — High (CVSS 7.1): Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on…
- CVE-2002-1222 — High (CVSS 7.1): Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote…
All CVEs affecting Cisco Catos →
Other CWE-399 (Resource Management Errors) vulnerabilities
- CVE-2015-8104 — Critical (CVSS 10.0): The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a…
- CVE-2015-0339 — Critical (CVSS 10.0): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before…
- CVE-2015-0335 — Critical (CVSS 10.0): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before…
- CVE-2015-0333 — Critical (CVSS 10.0): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before…
- CVE-2014-4121 — Critical (CVSS 10.0): Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly parse internationalized…
- CVE-2014-0560 — Critical (CVSS 10.0): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS…
Browse all CWE-399 (Resource Management Errors) vulnerabilities →