ABB Issues Security Advisory for AWIN Gateways Vulnerabilities

The Flaw

On March 11, 2026, ABB released a security advisory detailing critical vulnerabilities in their AWIN Gateway products. The affected devices include the AWIN GW100 rev.2 (versions 2.0-0 to 2.0-1) and the AWIN GW120 (versions 1.2-0 to 1.2-1). These vulnerabilities are related to the embedded webserver within these gateways, which could potentially expose systems to unauthorized access.

The vulnerabilities are identified by the CVE IDs: CVE^?-2025-13777, CVE^?-2025-13778, and CVE^?-2025-13779. Each of these vulnerabilities poses significant risks, as they can be exploited by attackers to gain control over the affected devices, leading to potential disruptions in critical control systems.

What's at Risk

The AWIN Gateways are integral to various control systems, particularly in industrial settings. If exploited, these vulnerabilities could allow attackers to manipulate processes, disrupt operations, or even compromise sensitive data. Industrial control systems are vital for maintaining safety and efficiency in manufacturing and utility services, making these vulnerabilities a serious concern.

The potential impact extends beyond just ABB's customers; it could affect entire industries relying on these systems. The security of critical infrastructure is paramount, and vulnerabilities in such systems can lead to widespread consequences.

Patch Status

ABB has encouraged users and administrators to review the advisory and take the necessary steps to mitigate these vulnerabilities. While specific patches^? or updates were not detailed in the advisory, it is crucial for users to monitor ABB's communications for updates on remediation.

The Cyber Centre has also emphasized the importance of implementing the suggested mitigations^? as soon as possible. Users should prioritize applying updates and reviewing security configurations to safeguard their systems against potential exploitation.

Immediate Actions

To protect against these vulnerabilities, users of the affected AWIN Gateway products should:

• Review the ABB security advisory and associated links for detailed information.
• Implement any recommended mitigations^? immediately.
• Regularly check for updates from ABB regarding patches^? or additional security measures.

By taking these proactive steps, users can significantly reduce the risk of exploitation and ensure the integrity of their control systems. Security in industrial environments is not just about technology; it’s about maintaining trust and safety in operations.