CVE-2020-29540: API calls in the Translation API feature in Systran Pure Neural Server before 9.7.0 allow a threat actor to use the Systran Pure Neural Server as a Denial-of-Service proxy by sending a large amount...

Summary

API calls in the Translation API feature in Systran Pure Neural Server before 9.7.0 allow a threat actor to use the Systran Pure Neural Server as a Denial-of-Service proxy by sending a large amount of translation requests to a destination host on any given TCP port regardless of whether a web servic...

What to do

Update systransoft pure_neural_server to version 9.7.0 or later.

Affected software

Vendor	Product	Affected versions
systransoft	pure_neural_server	< 9.7.0 `cpe:2.3:a:systransoft:pure_neural_server::::::::`

Original advisory text

API calls in the Translation API feature in Systran Pure Neural Server before 9.7.0 allow a threat actor to use the Systran Pure Neural Server as a Denial-of-Service proxy by sending a large amount...

API calls in the Translation API feature in Systran Pure Neural Server before 9.7.0 allow a threat actor to use the Systran Pure Neural Server as a Denial-of-Service proxy by sending a large amount of translation requests to a destination host on any given TCP port regardless of whether a web service is running on the destination port.

References

https://grave-rose.medium.com/two-systran-vulnerabilities-and-their-exploits-8bc... Exploit Third Party Advisory
https://www.systransoft.com/translation-products/systran-pure-neural-server/ Product