7.5

CVE-2024-33618

Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 
allows attackers to consume excessive amounts of disk space via network interface.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerBosch
≫
Produkt BVMS
Version <= 12.0.1
Version 6.0
Status affected
HerstellerBosch
≫
Produkt BVMS Viewer
Version <= 12.0.1
Version 8.0
Status affected
HerstellerBosch
≫
Produkt Bosch DIVAR IP all-in-one 7000 R3
Version <= 12.0.1
Version 10.1
Status affected
HerstellerBosch
≫
Produkt Bosch DIVAR IP 7000 R2
Version <= 12.0.1
Version 9.0
Status affected
HerstellerBosch
≫
Produkt Bosch DIVAR IP all-in-one 5000
Version <= 12.0.1
Version 9.0
Status affected
HerstellerBosch
≫
Produkt Bosch DIVAR IP all-in-one 7000
Version <= 12.0.1
Version 6.0
Status affected
HerstellerBosch
≫
Produkt DIVAR IP all-in-one 4000
Version <= 12.0.1
Version 11.1.1
Status affected
HerstellerBosch
≫
Produkt DIVAR IP all-in-one 6000
Version <= 12.0.1
Version 11.1.1
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.12
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
psirt@bosch.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.