CVE-2024-33618

Full vulnerability record from the local CVENow database.
Description

Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface.
Severity
HIGH
CVSS score
7.5 (v3.1)
Vulnerability status
Awaiting Analysis
Source identifier
[email protected]
Published
2026-04-15 10:16:37.120000
Last modified
2026-11-08 20:10:00.187000
View original CVE JSON
{
  "id": "CVE-2024-33618",
  "sourceIdentifier": "[email protected]",
  "published": "2026-04-15T10:16:37.120",
  "lastModified": "2026-11-08T20:10:00.187",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 \r\nallows attackers to consume excessive amounts of disk space via network interface."
    },
    {
      "lang": "es",
      "value": "Consumo descontrolado de recursos en el servidor central de Bosch VMS 12.0.1 permite a los atacantes consumir cantidades excesivas de espacio en disco a través de la interfaz de red."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Bosch",
          "product": "BVMS",
          "versions": [
            {
              "version": "6.0",
              "lessThanOrEqual": "12.0.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Bosch",
          "product": "BVMS Viewer",
          "versions": [
            {
              "version": "8.0",
              "lessThanOrEqual": "12.0.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Bosch",
          "product": "Bosch DIVAR IP all-in-one 7000 R3",
          "versions": [
            {
              "version": "10.1",
              "lessThanOrEqual": "12.0.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Bosch",
          "product": "Bosch DIVAR IP 7000 R2",
          "versions": [
            {
              "version": "9.0",
              "lessThanOrEqual": "12.0.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Bosch",
          "product": "Bosch DIVAR IP all-in-one 5000",
          "versions": [
            {
              "version": "9.0",
              "lessThanOrEqual": "12.0.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Bosch",
          "product": "Bosch DIVAR IP all-in-one 7000",
          "versions": [
            {
              "version": "6.0",
              "lessThanOrEqual": "12.0.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Bosch",
          "product": "DIVAR IP all-in-one 4000",
          "versions": [
            {
              "version": "11.1.1",
              "lessThanOrEqual": "12.0.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Bosch",
          "product": "DIVAR IP all-in-one 6000",
          "versions": [
            {
              "version": "11.1.1",
              "lessThanOrEqual": "12.0.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-15T13:09:08.201665Z",
          "id": "CVE-2024-33618",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://psirt.bosch.com/security-advisories/BOSCH-SA-162032-BT.html",
      "source": "[email protected]"
    }
  ]
}