Security Advisory
CVE-2025-7623
5.4
MEDIUM
Vulnerability Description
Stack-based buffer overflow in the SMASH-CLP shell. An authenticated attacker with SSH access to the BMC can exploit a stack buffer overflow via a crafted SMASH command, overwrite the return address and registers, and achieve arbitrary code execution on the BMC firmware operating system
Published Date
November 18, 2025
Official Source
NIST NVD Advisory