PT-2026-25313 · Abb · Awin Gw100 Rev.2+1

CVE-2025-13779

·

Publicado

2026-03-13

·

Atualizado

2026-05-19

CVSS v3.1

8.3

Alta

VetorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
Name of the Vulnerable Software and Affected Versions ABB AWIN GW100 rev.2 versions 2.0-0 through 2.0-1 ABB AWIN GW120 versions 1.2-0 through 1.2-1
Description A critical function lacks proper authentication. This allows unauthorized access to sensitive functionality within the affected systems. The issue concerns ABB AWIN GW100 rev.2 and ABB AWIN GW120 devices.
Recommendations ABB AWIN GW100 rev.2 versions 2.0-0 through 2.0-1 should be updated. ABB AWIN GW120 versions 1.2-0 through 1.2-1 should be updated.

Correção

Missing Authentication

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2025-13779

Produtos afetados

Awin Gw100 Rev.2
Awin Gw120