Delta Electronics AS320T firmware contains an undocumented subfunction that can be abused to cause a denial of service. The vulnerability allows an attacker to trigger the subfunction, forcing the device into a non‑responsive state and disrupting its intended operation. No information on the exact level of security impact beyond service interruption is provided, and the weakness is classified as CWE-912, indicating a flaw in the handling of a command or function call.

All Delta Electronics AS320T devices are potentially impacted, regardless of their current firmware release, unless the device has already been upgraded to firmware version 1.16 or later. No specific prior firmware version boundary is listed, so users should presume that any out‑of‑date firmware is vulnerable.

The CVSS score of 9.8 signals a critical severity, yet the EPSS score is below 1 % and the vulnerability is not listed in the CISA KEV catalog, suggesting a low probability of active exploitation at present. The attack vector is not explicitly disclosed; it is inferred to require access to the device’s command interface or the ability to send the undocumented subfunction to the device. Because the weakness is purely a denial‑of‑service issue, confidentiality and integrity are not directly compromised, but availability of the device is severely affected. The high severity score warrants prompt mitigation, even though exploitation likelihood appears low.