What is the CVSS score of EUVD-2026-25404?

EUVD-2026-25404 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

How to fix or mitigate EUVD-2026-25404?

Within 24 hours: Identify and inventory all Delta AS320T devices in your environment using network discovery tools; isolate affected units from untrusted network segments if operationally feasible. Within 7 days: Implement network segmentation and access controls restricting AS320T devices to authorized control networks only; deploy IDS/IPS signatures to detect exploitation attempts targeting the undocumented subfunction; contact Delta Electronics (PCSA-2026-00006) for mitigation guidance and patch timeline. Within 30 days: Continuously monitor Delta security advisories for patch availability; evaluate firmware upgrade procedures; conduct risk reassessment if patches become available.

Delta AS320T EUVD-2026-25404

| CVE-2026-1952 CRITICAL

Hidden Functionality (CWE-912)

2026-04-24 Deltaww

GHSA-598w-79v9-4m2g

Denial Of Service As320T

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 24, 2026 - 07:22 vuln.today

cvss_changed

Analysis Generated

Apr 24, 2026 - 07:00 vuln.today

EUVD ID Assigned

Apr 24, 2026 - 06:45 euvd

EUVD-2026-25404

Analysis Generated

Apr 24, 2026 - 06:45 vuln.today

CVE Published

Apr 24, 2026 - 06:08 nvd

CRITICAL 9.8

DescriptionCVE.org

Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability.

AnalysisAI

Remote unauthenticated attackers can trigger denial of service in Delta Electronics AS320T industrial automation devices by invoking an undocumented subfunction. The vulnerability allows network-accessible exploitation without credentials against default configurations, potentially disrupting critical industrial control operations. Delta Electronics confirmed the flaw in PCSA-2026-00006, grouped with three other CVEs affecting the same product line.

Technical ContextAI

The AS320T is a Delta Electronics industrial automation product (CPE: cpe:2.3:a:deltaww:as320t). The vulnerability stems from CWE-912 (Hidden Functionality), indicating the presence of undocumented or debug subfunctions in the device's network interface that lack proper access controls. These hidden features, likely intended for testing or maintenance, expose attack surface to unauthorized network actors. Industrial control devices frequently contain such residual functionality that bypasses normal authentication and authorization mechanisms, creating a critical weakness when internet-facing or accessible from untrusted networks.

RemediationAI

Consult Delta Electronics advisory PCSA-2026-00006 (https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00006_AS320T%20Multiple%20vulnerabilities%20(CVE-2026-1949,%201950,%201951,%201952).pdf) for patched firmware versions and upgrade instructions - vendor-released patches not independently confirmed from available data. Until patching, implement network segmentation to isolate AS320T devices on dedicated OT VLANs with no direct internet exposure, enforcing strict firewall rules permitting only authorized source IPs to management interfaces (note: reduces operational flexibility for remote monitoring). Deploy industrial protocol inspection at the network perimeter to detect abnormal subfunction invocations if protocol specifications are known (requires Deep Packet Inspection capability and AS320T protocol knowledge). Monitor device logs for unexpected service restarts or availability gaps indicating exploitation attempts. Given CWE-912 (hidden functionality), also review vendor documentation for any mention of debug/maintenance modes that should be disabled in production deployments.