Delta Electronics AS320T suffers from a stack-based buffer overflow (CWE-121) due to lack of length checking on a buffer used for directory names. This vulnerability allows an unauthenticated attacker to remotely execute code or cause denial of service by sending specially crafted input that overflows the buffer. The CVSS 3.1 score of 9.8 reflects the critical nature of this vulnerability with full impact on confidentiality, integrity, and availability. The affected product is cloud-hosted, and the vendor manages remediation for this service. No public exploit is currently known.

Successful exploitation could lead to remote code execution, complete system compromise, or denial of service affecting confidentiality, integrity, and availability of the AS320T cloud service. Given the critical CVSS score and network attack vector with no privileges required, this vulnerability poses a severe risk to affected deployments.

A patch is available for this vulnerability. Since the AS320T is a cloud-hosted service, the vendor manages remediation server-side. Users should verify with the vendor advisory that their service instance has been updated. No additional user action is required if the vendor confirms patch deployment.