CVE-2024-33618
Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk…
- Published
- Updated
- Reserved
- Assigned by
- bosch
Description
Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface.
Timeline
ID reserved
By bosch
- 22 months later
· 22 months later
Published
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| boschCNA (assigner) | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Awaiting Analysis | 3.1 | High7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.46% · top 60% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: yes · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Weakness
Affected products
- affected 6.0 – ≤ 12.0.1
- affected 8.0 – ≤ 12.0.1
Bosch · Bosch DIVAR IP all-in-one 7000 R3
- affected 10.1 – ≤ 12.0.1
Bosch · Bosch DIVAR IP 7000 R2
- affected 9.0 – ≤ 12.0.1
Bosch · Bosch DIVAR IP all-in-one 5000
- affected 9.0 – ≤ 12.0.1
Bosch · Bosch DIVAR IP all-in-one 7000
- affected 6.0 – ≤ 12.0.1
Bosch · DIVAR IP all-in-one 4000
- affected 11.1.1 – ≤ 12.0.1
Bosch · DIVAR IP all-in-one 6000
- affected 11.1.1 – ≤ 12.0.1
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2024-33618)Record last updated .