CVE-2013-3453: Memory leak in Cisco Unified Communications Manager IM and Presence Service before 8.6(5)SU1 and 9.x before...

Security readout for executives and security teams

This issue can let a remote attacker exhaust memory and CPU on affected Cisco presence services, disrupting chat or presence availability. The source bundle identifies a Cisco denial-of-service vulnerability, not data theft or code execution. Exposure is most likely where affected Cisco presence or unified communications systems accept TCP connections to ports 5060 or 5061 from untrusted networks. Internal-only deployments still matter if large user networks can reach those ports. Treat this as a service availability risk for organizations relying on Cisco presence or communications infrastructure. Prioritize remediation if SIP ports are internet-exposed or broadly reachable internally. Mitigation focus: Upgrade affected CUCM IM and Presence versions to Cisco fixed releases where applicable.; Review the Cisco advisory for Cisco Unified Presence-specific remediation guidance.; Restrict ports 5060 and 5061 to trusted networks and required peers..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.