Detections
Analytics
CVE-2025-7623
medium
Description
Stack-based buffer overflow in the SMASH-CLP shell. An authenticated attacker with SSH access to the BMC can exploit a stack buffer overflow via a crafted SMASH command, overwrite the return address and registers, and achieve arbitrary code execution on the BMC firmware operating system
References
https://www.supermicro.com/zh_tw/support/security_BMC_IPMI_Nov_2025