Authentication Bypass Vulnerability in ABB AWIN GW100 and GW120 Products
CVE-2025-13778

7.1HIGH

Key Information:

Vendor

Abb

Status
Awin Gw100 Rev.2
Awin Gw120
Vendor
CVE Published:
13 March 2026

What is CVE-2025-13778?

An authentication bypass vulnerability exists in the ABB AWIN GW100 revision 2 and AWIN GW120 devices. This flaw allows unauthorized access through capture-replay techniques, potentially enabling attackers to exploit the affected devices without proper authentication. Affected versions include AWIN GW100 rev.2 versions 2.0-0 and 2.0-1, and AWIN GW120 versions 1.2-0 and 1.2-1. Users of these products should assess their exposure and implement suitable mitigations as recommended by the vendor.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

AWIN GW100 rev.2 2.0-0

AWIN GW100 rev.2 2.0-1

AWIN GW120 1.2-0

References

https://search.abb.com/library/Download.aspx?DocumentID=4...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.