Abb Awin GW120 vulnerabilities

3 CVEs affecting Abb Awin GW120, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-13779, published 2026-03-13.

More from Abb.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-13779, published 2026-03-13. High severity, CVSS 8.3. EPSS: 0.3% chance of exploitation in the next 30 days. Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.
• CVE-2025-13778, published 2026-03-13. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.
• CVE-2025-13777, published 2026-03-13. High severity, CVSS 8.3. EPSS: 0.2% chance of exploitation in the next 30 days. Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.