Delta Electronics AS320T firmware contains a buffer overflow flaw caused by the lack of length checking when processing file names. The overflow can corrupt the stack, allowing an attacker to execute arbitrary code or raise privileges. The vulnerability is present in AS320T devices running firmware prior to version 1.16. No explicit version range is listed beyond the recommendation to upgrade. The CVSS score of 9.8 indicates a high severity, while the EPSS < 1% suggests that exploitation is currently rare or not widely observed. The flaw is not listed in the CISA KEV catalog. Based on the description, it is inferred that an attacker could trigger the overflow by sending a specially crafted file name to the device, potentially from a remote source if the device accepts user‑supplied files.

The vulnerable devices are Delta Electronics AS320T network storage units. Firmware versions earlier than 1.16 lack the necessary length check for file names and are affected. Upgrade to firmware v1.16 or later resolves the issue.

The CVSS score of 9.8 indicates critical severity. The EPSS < 1% suggests a low likelihood of exploitation. The vulnerability is not referenced in the CISA KEV catalog. Attackers would need to deliver a malicious file name to the AS320T, possibly over a network interface that accepts file uploads, to trigger the buffer overflow and potentially gain arbitrary code execution with device privileges.