An undocumented subfunction vulnerability in the Delta Electronics AS320T allows unauthenticated attackers to trigger a denial-of-service condition.

This vulnerability involves the presence of hidden, undocumented functionality (CWE-912) that can be abused by an unauthenticated, remote attacker to cause a denial-of-service, disrupting device operations.

The exploitation of this flaw can result in significant operational disruption, as the device becomes unresponsive or enters a failed state. Given the CVSS score of 9.8, this vulnerability is critical, posing a severe risk to service availability and system uptime for industrial or network environments utilizing this hardware.

Immediate Action: Upgrade the device firmware to version 1.16 or later as specified in the vendor advisory.

Proactive Monitoring: Monitor device logs for unusual traffic patterns or unexpected service interruptions that may indicate attempts to trigger hidden functions.

Compensating Controls: Implement network segmentation to restrict access to the device management interfaces to only authorized administrative segments.

Public Exploit Available: No (unknown)

The severity of this vulnerability necessitates immediate action to maintain system integrity. Administrators should prioritize upgrading the firmware on all affected Delta Electronics AS320T units to version 1.16 or higher to eliminate the risk associated with this undocumented subfunction.