High severity · published Apr 15, 2026
CVE-2024-33618
Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface
7.5
CVSS
0.5%
EPSS
No
On KEV
Description
Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1
allows attackers to consume excessive amounts of disk space via network interface.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BV
BVMS · Bosch
6.0 through 12.0.1 · source: vendor
BV
BVMS Viewer · Bosch
8.0 through 12.0.1 · source: vendor
BD
Bosch DIVAR IP 7000 R2 · Bosch
9.0 through 12.0.1 · source: vendor
BD
Bosch DIVAR IP all-in-one 5000 · Bosch
9.0 through 12.0.1 · source: vendor
BD
Bosch DIVAR IP all-in-one 7000 · Bosch
6.0 through 12.0.1 · source: vendor
BD
Bosch DIVAR IP all-in-one 7000 R3 · Bosch
10.1 through 12.0.1 · source: vendor
DI
DIVAR IP all-in-one 4000 · Bosch
11.1.1 through 12.0.1 · source: vendor
DI
DIVAR IP all-in-one 6000 · Bosch
11.1.1 through 12.0.1 · source: vendor