Orta CVSS 5.4
CVE-2025-7623: CVE-2025-7623: yığıt (stack) taşması
Açıklama (NVD)
Stack-based buffer overflow in the SMASH-CLP shell. An authenticated attacker with SSH access to the BMC can exploit a stack buffer overflow via a crafted SMASH command, overwrite the return address and registers, and achieve arbitrary code execution on the BMC firmware operating system
Özet bilgiler
- CVSS v3.1
- 5.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L - EPSS
- %0,29 (yüzdelik 21)
- CWE
- CWE-121
- Yama
- Yok / bilinmiyor