Security Advisory

CVE-2025-7623

5.4
MEDIUM

Vulnerability Description

Stack-based buffer overflow in the SMASH-CLP shell. An authenticated attacker with SSH access to the BMC can exploit a stack buffer overflow via a crafted SMASH command, overwrite the return address and registers, and achieve arbitrary code execution on the BMC firmware operating system
Published Date November 18, 2025
Official Source NIST NVD Advisory