Description
Stack-based buffer overflow in the SMASH-CLP shell. An authenticated attacker with SSH access to the BMC can exploit a stack buffer overflow via a crafted SMASH command, overwrite the return address and registers, and achieve arbitrary code execution on the BMC firmware operating system
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SMCI | MBD-X13SEDW-F | 01.04.11 | — |