CVE-2025-7623 — Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability

CVE-2025-7623

Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability PUBLISHED

Description (CNA)

Stack-based buffer overflow in the SMASH-CLP shell. An authenticated attacker with SSH access to the BMC can exploit a stack buffer overflow via a crafted SMASH command, overwrite the return address and registers, and achieve arbitrary code execution on the BMC firmware operating system

Affected (CNA)

Vendor / product	Versions
SMCI / MBD-X13SEDW-F	affected 01.04.11

CWE

CWE-121

References

https://www.supermicro.com/zh_tw/support/security_BMC_IPMI_Nov_2025

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.