A critical stack-based buffer overflow in the Delta Electronics AS320T allows unauthenticated remote attackers to potentially execute arbitrary code.

The software fails to perform adequate bounds checking on directory names, leading to a stack-based buffer overflow (CWE-121). This vulnerability is exploitable by an unauthenticated attacker over the network.

Successful exploitation allows for complete system compromise, including potential unauthorized code execution, data theft, and persistent denial-of-service. With a CVSS score of 9.8, the impact is considered total, threatening the confidentiality, integrity, and availability of the affected system.

Immediate Action: Upgrade the device firmware to version 1.12 or later immediately to patch the buffer overflow vulnerability.

Proactive Monitoring: Review system logs for signs of memory corruption, unexpected process crashes, or unauthorized command execution.

Compensating Controls: Utilize a Web Application Firewall (WAF) or Network Intrusion Prevention System (NIPS) to filter malicious traffic containing oversized directory naming strings.

Public Exploit Available: No (unknown)

Given the critical nature of this buffer overflow, immediate firmware remediation is required. Security teams must ensure that all AS320T devices are updated to at least version 1.12 to prevent potential remote exploitation of the directory handling mechanism.