Vulnerability Details CVE-2010-2840
The Presence Engine (PE) service in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) does not properly handle an erroneous Contact field in the header of a SIP SUBSCRIBE message, which allows remote attackers to cause a denial of service (process failure) via a malformed message, aka Bug ID CSCtd39629.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.4%
CVSS Severity
CVSS v2 Score 7.8
References
Products affected by CVE-2010-2840
-
cpe:2.3:a:cisco:unified_presence_server:6.0
-
cpe:2.3:a:cisco:unified_presence_server:6.0(2)
-
cpe:2.3:a:cisco:unified_presence_server:6.0(2.1101)
-
cpe:2.3:a:cisco:unified_presence_server:6.0(3)
-
cpe:2.3:a:cisco:unified_presence_server:6.0(3.1101-2)
-
cpe:2.3:a:cisco:unified_presence_server:6.0(4)
-
cpe:2.3:a:cisco:unified_presence_server:6.0(4.1101-5)
-
cpe:2.3:a:cisco:unified_presence_server:6.0(5)
-
cpe:2.3:a:cisco:unified_presence_server:6.0(5.1101-1)
-
cpe:2.3:a:cisco:unified_presence_server:6.0(5.1103-2)
-
cpe:2.3:a:cisco:unified_presence_server:6.0(6)
-
cpe:2.3:a:cisco:unified_presence_server:6.0.5.1102-1
-
cpe:2.3:a:cisco:unified_presence_server:7.0
-
cpe:2.3:a:cisco:unified_presence_server:7.0(2)
-
cpe:2.3:a:cisco:unified_presence_server:7.0(3)
-
cpe:2.3:a:cisco:unified_presence_server:7.0(4)
-
cpe:2.3:a:cisco:unified_presence_server:7.0(5)
-
cpe:2.3:a:cisco:unified_presence_server:7.0(6)
-
cpe:2.3:a:cisco:unified_presence_server:7.0(7)
-
cpe:2.3:a:cisco:unified_presence_server:7.0.3.10102-3
-
cpe:2.3:a:cisco:unified_presence_server:7.0.3.10103-2
-
cpe:2.3:a:cisco:unified_presence_server:7.0.4.10101-2