VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 26, 2010· Updated Jun 16, 2026

CVE-2010-2840

CVE-2010-2840

Description

The Presence Engine (PE) service in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) does not properly handle an erroneous Contact field in the header of a SIP SUBSCRIBE message, which allows remote attackers to cause a denial of service (process failure) via a malformed message, aka Bug ID CSCtd39629.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

23
  • Cisco Systems, Inc./Unified Presence Server23 versions
    cpe:2.3:a:cisco:unified_presence_server:6.0:*:*:*:*:*:*:*+ 22 more
    • cpe:2.3:a:cisco:unified_presence_server:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(2\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(2.1101\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(3\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(3.1101-2\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(4\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(4.1101-5\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(5\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(5.1101-1\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0.5.1102-1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(5.1103-2\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:6.0\(6\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0\(2\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0\(3\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0.3.10102-3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0.3.10103-2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0\(4\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0.4.10101-2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0\(5\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0\(6\):*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:unified_presence_server:7.0\(7\):*:*:*:*:*:*:*
    • (no CPE)range: 6.x <6.0(7), 7.x <7.0(8)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.