LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →
Home / Vulnerability Intelligence / CVE-2025-13777

CVE-2025-13777 - Vulnerability Analysis

HighCVSS: 8.3

Last Updated: March 16, 2026

ABB AWIN - Authentication Bypass

Published: March 13, 2026Updated: March 16, 2026

Overview

ABB AWIN GW100 rev.2 2.0-0 to 2.0-1 and AWIN GW120 1.2-0 to 1.2-1 contain an authentication bypass caused by capture-replay vulnerability, letting attackers bypass authentication, exploit requires network access to capture and replay authentication data.

Severity & Score

Severity: High
CVSS Score: 8.3
EPSS Score: 2.8%(Probability of exploitation in next 30 days)

Impact

Attackers can bypass authentication, gaining unauthorized access to the system.

Mitigation

Update to the latest available version.

Social Media Activity(1 post)

TheHackerWire
TheHackerWire
@thehackerwire
Mar 14, 2026

🟠 CVE-2025-13777 - High (8.3) Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1. šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2025-13777/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Details

CVE ID
CVE-2025-13777
Severity
High
CVSS Score
8.3
Type
broken_authentication
Status
unconfirmed
EPSS
2.8%
Social Posts
1

CWE

  • CWE-294

CVSS Metrics

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

EPSS Score

2.8%Probability of exploitation in the next 30 days