CVE-2025-13777

High

Published: 13/03/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A vulnerability allowing authentication bypass via capture-replay attack has been identified in ABB AWIN GW100 rev.2 and AWIN GW120. This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

Risk Assessment

This vulnerability may lead to unauthorized access to systems, posing a serious threat to the security of data and organizational operations.

Recommendation

It is recommended to update the devices to the latest versions that address this vulnerability and implement additional security measures.

Other vulnerabilities in ABB AWIN GW100 rev.2, ABB AWIN GW120

CVE-2025-13779High
There is a missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2 and AWIN GW120. This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

Original NVD description (English source)

Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.