ECOA building automation systems suffer from authorization bypass and insecure direct object reference vulnerabilities. Many versions are affected. Continue reading...