Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-7623 EUVD-2025-197951GHSA-95mg-3279-c5xh

Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability

Published Nov 18, 2025 · Updated Nov 18, 2025 · Assigned by Supermicro

Description

Stack-based buffer overflow in the SMASH-CLP shell. An authenticated attacker with SSH access to the BMC can exploit a stack buffer overflow via a crafted SMASH command, overwrite the return address and registers, and achieve arbitrary code execution on the BMC firmware operating system

Affected products

VendorProductAffectedFixed
SMCI MBD-X13SEDW-F 01.04.11 —

References