CVE-2025-8404 - Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library · CoreCVE

Back Back to CVE browser

MEDIUM

Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library

Published Nov 18, 2025

5.5

MEDIUM

CVSS 3.1

EPSS 0.32%

Description

Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library. An authenticated attacker with access to the BMC exploit stack buffer via a crafted header and achieve arbitrary code execution of the BMC’s firmware operating system.

Affected products

Vendor SMCI Product Mbd-X13sedw-F Default
unaffected
- Version
  01.03.48
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
01.03.48	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-121

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-197953		Advisory
https://www.supermicro.com/zh_tw/support/security_BMC_IPMI_Nov_2025

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Supermicro

Published Nov 18, 2025

Updated Nov 19, 2025

Reserved Jul 31, 2025

Link CVE-2025-8404

CISA Vulnrichment

Updated Nov 18, 2025

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-8404

Severity n/a

Public date n/a

Links CVE-2025-8404

Assigner Supermicro

Published Nov 18, 2025

Updated Nov 19, 2025

Exploited since n/a

Link EUVD-2025-197953

EUVD-2025-197953