Security Advisory
CVE-2025-7623
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Stack-based buffer overflow in the SMASH-CLP shell. An authenticated attacker with SSH access to the BMC can exploit a stack buffer overflow via a crafted SMASH command, overwrite the return address and registers, and achieve arbitrary code execution on the BMC firmware operating system