Vulnerabilities > CVE-2020-29540 - Unspecified vulnerability in Systransoft Pure Neural Server
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
API calls in the Translation API feature in Systran Pure Neural Server before 9.7.0 allow a threat actor to use the Systran Pure Neural Server as a Denial-of-Service proxy by sending a large amount of translation requests to a destination host on any given TCP port regardless of whether a web service is running on the destination port.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
References
- https://grave-rose.medium.com/two-systran-vulnerabilities-and-their-exploits-8bc83ba29e14
- https://grave-rose.medium.com/two-systran-vulnerabilities-and-their-exploits-8bc83ba29e14
- https://www.systransoft.com/translation-products/systran-pure-neural-server/
- https://www.systransoft.com/translation-products/systran-pure-neural-server/