« Volver al listado

CVE-2010-2840

Estado: ModificadaAlta (7.8)—

The Presence Engine (PE) service in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) does not properly handle an erroneous Contact field in the header of a SIP SUBSCRIBE message, which allows remote attackers to cause a denial of service (process failure) via a malformed message, aka Bug ID CSCtd39629.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Unified Presence Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-2840",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-08-26T21:00:01.577",
  "references": [
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43909.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/2186",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b43909.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/2186",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Presence Engine (PE) service in Cisco Unified Presence 6.x before 6.0(7) and 7.x before 7.0(8) does not properly handle an erroneous Contact field in the header of a SIP SUBSCRIBE message, which allows remote attackers to cause a denial of service (process failure) via a malformed message, aka Bug ID CSCtd39629."
    },
    {
      "lang": "es",
      "value": "El servicio Presence Engine (PE) en Cisco Unified Presence v6.x anterior a v6.0(7) y v7.x anterior a v7.0(8), no maneja apropiadamente un campo \"Contact\" erróneo en la cabecera de un mensaje SIP SUSCRIBE, lo que permite a atacantes remotos provocar una denegación de servicio (fallo del proceso) a través de un mensaje mal formado. También conocido como Bug ID CSCtd39629."
    }
  ],
  "lastModified": "2026-06-16T23:21:36.323",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6D9CEBA2-160F-4303-9C1D-C7BD7E758CFE"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:6.0\\(2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A704B14E-EC47-47E5-8AA1-35E0138B6A69"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:6.0\\(3\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F95246B-7822-4077-BC9C-3E1C0B02C139"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:6.0\\(4\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5D01D8A-9F92-4900-941C-0B481D277D95"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:6.0\\(5\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E72DE400-8ACA-4D01-8BBE-7F13959F4DDC"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:6.0\\(6\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F049CAA8-6FA8-4642-910C-70C8D3CEAF96"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1706BFD4-817A-4BA2-8B3B-60CDF1F54A16"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:7.0\\(2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B9C5872-317C-4A68-8E99-DEB224BAE607"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:7.0\\(3\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6F4FC53-3627-4826-8CFC-BEEBCB8CEC87"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:7.0\\(4\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8BACEF63-F22A-4B39-84AE-A950AC024EB0"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:7.0\\(5\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "703C2FA6-B723-41B1-BEA3-87AABD6F85DC"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:7.0\\(6\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80D0D477-4976-45FB-A089-5C19119D2BC6"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:7.0\\(7\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0398D739-6A84-4817-AFD0-80A4513F1AD4"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:6.0\\(2.1101\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33A4FA6A-D37D-465D-921A-51E429A30537"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:6.0\\(3.1101-2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BDE292F1-2F4F-40BE-9E2A-E3F1C55857EC"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:6.0\\(4.1101-5\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B709CF6E-C148-4AD6-962B-A1055396DC8D"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:6.0\\(5.1101-1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B64ACB1-C4E5-48B9-8747-4F7AFA6955A2"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:6.0\\(5.1103-2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3AB3FB41-7A7B-4342-9ED2-27ACDD29E5D6"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:6.0.5.1102-1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A81DC553-FFAB-4D13-8484-E174CA918D23"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:7.0.3.10102-3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED42650B-EDED-4CC5-BA26-D179E7F25177"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:7.0.3.10103-2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B734482D-2E7E-4A4B-BB3C-3ABC2EB8FD50"
            },
            {
              "criteria": "cpe:2.3:a:cisco:unified_presence_server:7.0.4.10101-2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EE3D3770-3C99-4FCF-9B42-727A40D6062F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}