CVE-2025-13779 - Vulnerability Analysis

Overview

ABB AWIN GW100 rev.2 2.0-0, 2.0-1 and AWIN GW120 1.2-0, 1.2-1 contain a broken authentication caused by missing authentication for critical functions, letting attackers access critical functions without authentication, exploit requires no special conditions.

Severity & Score

Impact

Attackers can access critical functions without authentication, potentially leading to unauthorized control or data manipulation.

Mitigation

Update to the latest available version.

References

• https://search.abb.com/library/Download.aspx?DocumentID=4JNO000329&LanguageCode=en&DocumentPartId=&Action=Launch

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner