CVE-2025-13779

High

Published: 13/03/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

There is a missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2 and AWIN GW120. This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

Risk Assessment

The lack of proper authentication may lead to unauthorized access to critical system functions, posing a serious security threat to the organization.

Recommendation

It is recommended to update the systems to the latest versions that address this vulnerability and implement additional authentication mechanisms.

Other vulnerabilities in ABB AWIN GW100 rev.2, ABB AWIN GW120

CVE-2025-13777High
A vulnerability allowing authentication bypass via capture-replay attack has been identified in ABB AWIN GW100 rev.2 and AWIN GW120. This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.

Original NVD description (English source)

Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.