Vulnerability · Published Apr 15, 2026 · Assigned by bosch
CVE-2024-33618
High 7.5
In plain English
A high-severity uncontrolled resource consumption in Bosch DIVAR IP 7000 R2 from Bosch. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 60.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Bosch | BVMS | 6.0 – through 12.0.1 |
| Bosch | BVMS Viewer | 8.0 – through 12.0.1 |
| Bosch | Bosch DIVAR IP all-in-one 7000 R3 | 10.1 – through 12.0.1 |
| Bosch | Bosch DIVAR IP 7000 R2 | 9.0 – through 12.0.1 |
| Bosch | Bosch DIVAR IP all-in-one 5000 | 9.0 – through 12.0.1 |
| Bosch | Bosch DIVAR IP all-in-one 7000 | 6.0 – through 12.0.1 |
| Bosch | DIVAR IP all-in-one 4000 | 11.1.1 – through 12.0.1 |
| Bosch | DIVAR IP all-in-one 6000 | 11.1.1 – through 12.0.1 |
Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H