VulnerabilityDeferred

CVE-2025-8404

Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library.

MEDIUM 5.5EPSS 0.32%

Does this matter?

Lower severity and a low EPSS score (0.32%). Track it; it rarely justifies an emergency change on its own.

Description

Stack buffer overflow vulnerability exists in the Supermicro BMC Shared library. An authenticated attacker with access to the BMC exploit stack buffer via a crafted header and achieve arbitrary code execution of the BMC’s firmware operating system.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
EPSS: 0.32% probability · 25th percentile
CISA KEV: Not listed
Weakness: CWE-121
Source: def9a96e-e099-41a9-bfac-30fd4f82c411

References

https://www.supermicro.com/zh_tw/support/security_BMC_IPMI_Nov_2025

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.