VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Aug 26, 2010· Updated Apr 29, 2026

CVE-2010-2840

CVE-2010-2840

Description

The Presence Engine (PE) service in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) does not properly handle an erroneous Contact field in the header of a SIP SUBSCRIBE message, which allows remote attackers to cause a denial of service (process failure) via a malformed message, aka Bug ID CSCtd39629.

Affected products

22
  • Cisco Systems, Inc./Unified Presence Server22 versions
    cpe:2.3:a:cisco:unified_presence_server:6.0:*:*:*:*:*:*:*+ 21 more
    • cpe:2.3:a:cisco:unified_presence_server:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(2\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(2.1101\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(3\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(3.1101-2\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(4\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(4.1101-5\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(5\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(5.1101-1\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0.5.1102-1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(5.1103-2\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(6\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0\(2\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0\(3\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0.3.10102-3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0.3.10103-2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0\(4\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0.4.10101-2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0\(5\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0\(6\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0\(7\):*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.